Edit tour

Windows Analysis Report
https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z

Overview

General Information

Sample URL:	https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z
Analysis ID:	1532906
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 716 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6056 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 3631sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ODPBJ8JDwlvHFjUAiF0BaFqZm-zoRHL5vkC66dsiGnfWkiTTOJa5NsHoXyo-VFhcVXin8l9Lm741f_myh2GybFzLYxVMt7rq9qHQjJ3orc2AZZidD2IrnAWLcdVu_WmQ_6WcBws9tDQDP3-ko-0S5F7iKGUEwbKh4Hszmkrm6JBMLfdClA

Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_162.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_166.2.dr, chromecache_142.2.dr, chromecache_111.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_126.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_126.2.dr, chromecache_142.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_111.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_162.2.dr, chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_126.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://calendar.google.com/calendar
Source: chromecache_126.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_126.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_190.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_126.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_190.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_139.2.dr	String found in binary or memory: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view?usp=sharing
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_126.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_126.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_162.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_140.2.dr, chromecache_165.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlematerialicons/v142/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2)
Source: chromecache_140.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://gemini.google.com/gems/view
Source: chromecache_162.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_162.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_151.2.dr	String found in binary or memory: https://in-automate.brevo.com/cm?
Source: chromecache_115.2.dr, chromecache_111.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_162.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_126.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_111.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_126.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_105.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_111.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_111.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_162.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_162.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_162.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_139.2.dr	String found in binary or memory: https://sibautomation.com/cm.html?id=4489679#trans=0&user_id=210193
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_111.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_126.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_162.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_162.2.dr, chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129?hl=en
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://support.google.com/docs?p=comments_guide
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/docs?p=vids-stock-content
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/drive/answer/13447401
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/drive?p=gemini_drive_pdf
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_162.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_162.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_126.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://tasks.google.com/
Source: chromecache_162.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_111.2.dr	String found in binary or memory: https://workspace.google.com/terms/google-workspace-individual-terms/esignature-signer/
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_162.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_126.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_126.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_162.2.dr, chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_162.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_162.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_162.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_105.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_105.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_126.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_123.2.dr, chromecache_115.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_111.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_162.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_166.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_126.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_130.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.youtubeeducation.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50176 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/128@48/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6056 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6056 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z	0%	Virustotal		Browse

Source	Detection	Scanner	Label
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	0%	URL Reputation	safe
https://help.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/tools/feedback/	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/inapp/	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe
http://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	0%	URL Reputation	safe
https://support.google.com/	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://scone-pa.clients6.google.com	0%	URL Reputation	safe
https://support.google.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
blobcomments-pa.clients6.google.com	142.250.185.106	true	false	unknown
rr2.sn-p5qs7n6d.c.drive.google.com	173.194.7.199	true	false	unknown
video.l.google.com	172.217.18.14	true	false	unknown
plus.l.google.com	216.58.206.78	true	false	unknown
i.ytimg.com	172.217.18.118	true	false	unknown
peoplestackwebexperiments-pa.clients6.google.com	142.250.185.106	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
r1.mailin.fr	1.179.112.196	true	false	unknown
in-automate.brevo.com	172.64.150.216	true	false	unknown
play.google.com	216.58.206.78	true	false	unknown
rr4.sn-ab5l6nk6.c.drive.google.com	74.125.0.137	true	false	unknown
drive.google.com	142.250.186.78	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
sibautomation.com	104.18.39.141	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.161	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	unknown
video.google.com	unknown	unknown	false	unknown
rr2---sn-p5qs7n6d.c.drive.google.com	unknown	unknown	false	unknown
rr4---sn-ab5l6nk6.c.drive.google.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
7t8ql.r.ag.d.sendibm3.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false	unknown
https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z	false	unknown
https://drive.google.com/get_video_info?docid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&drive_originator_app=303	false	unknown
https://drive.google.com/drive-viewer/AKGpihbsYuRPXht5N3qTymeAiJ0CP1I58g8-Tyx5BFqtshSJE0_PVZ-tk7G6s_SraY6NWh4CqJLgs5B2Ag8zlojzedRc816LtsYMfXQ=w1920-h1080-k-rw-v1-pd	false	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0	false	unknown
https://drive.google.com/timedtext?id=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&vid=0c2811d10ea7c96c&authpayload=ASH5dRmXCHhTODr0jIskuL9KQTx0eokai7Yrt7lwcDsDtjQkQ0mNAz1zGrY231MM7R7RUuGAHc8gph85UnNQO---7HkVk_8c7co8Eq3xNnzgHWUCL2JjV_IJUHgbiiF2_Tz9&hl=en-US&type=list&tlangs=1&v=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&vssids=1	false	unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false	unknown
https://play.google.com/log?format=json&hasfast=true	false	unknown
https://drive.google.com/drive-viewer/AKGpihbsYuRPXht5N3qTymeAiJ0CP1I58g8-Tyx5BFqtshSJE0_PVZ-tk7G6s_SraY6NWh4CqJLgs5B2Ag8zlojzedRc816LtsYMfXQ=s1600-rw-v1	false	unknown
https://in-automate.brevo.com/cm?uuid=2bf2ac4a-59e1-4b80-8d84-c4aa442a3bbc&key=g4casc8t318mm5nhft56zqug&trans=0&user_id=210193	false	unknown
https://lh3.googleusercontent.com/drive-storage/AJQWtBP51xmDayO177Cu2hlTmLgPBm_fdzpys_Wjx3cxmGoJnkQ5Clw0h8bHEzH99AuRaHAcAujFc8xx6IbDxJfjQM-jkya0wb50YqSG=s512	false	unknown
https://video.google.com/api/stats/watchtime?ns=gd&el=leaf&cpn=sxKOFrQHdQ0DzukG&ver=2&cmt=14.542&fmt=136&fs=0&rt=29.003&euri=https%3A%2F%2Fdrive.google.com%2F&lact=6959&cl=683840428&state=paused&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=267.331&rtn=74&afmt=140&idpj=-9&ldpj=-4&rti=29&st=11.328&et=14.542&muted=0&docid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM	false	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0?le=scs	false	unknown
https://sibautomation.com/cm.html?id=4489679	false	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_1	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_162.2.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_166.2.dr, chromecache_142.2.dr, chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_162.2.dr, chromecache_166.2.dr, chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/googleapis.proxy.js	chromecache_126.2.dr	false		unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_126.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://help.youtube.com/tools/feedback/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	false	URL Reputation: safe	unknown
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://policies.google.com/terms	chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_166.2.dr, chromecache_130.2.dr, chromecache_153.2.dr, chromecache_111.2.dr	false		unknown
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/drive/answer/2407404?hl=en	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_126.2.dr	false	URL Reputation: safe	unknown
https://workspace.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/legal/answer/3110420	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://in-automate.brevo.com/cm?	chromecache_151.2.dr	false		unknown
https://support.google.com/docs/answer/49114	chromecache_111.2.dr	false		unknown
https://support.google.com/drive/answer/2423694	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_111.2.dr	false		unknown
https://drive-thirdparty.googleusercontent.com/	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_126.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://calendar.google.com/calendar	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://www.google.com/tools/feedback	chromecache_162.2.dr, chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://sandbox.google.com/inapp/%	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://tasks.google.com/	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/docs?p=vids-stock-content	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://www.google.com/tools/feedback/	chromecache_162.2.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_126.2.dr	false		unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://punctual-dev.corp.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://plus.google.com	chromecache_105.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://www.youtubeeducation.com	chromecache_130.2.dr, chromecache_153.2.dr	false		unknown
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://clients5.google.com/webstore/wall/widget	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/drive?p=gemini_drive_pdf	chromecache_111.2.dr	false		unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://localhost.corp.google.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/drive/answer/7650301	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://drive.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_126.2.dr	false		unknown
https://policies.google.com/privacy	chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/requestreview?id=	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/docs/answer/65129?hl=en	chromecache_123.2.dr, chromecache_115.2.dr	false		unknown
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/drive/my-drive	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/docs/answer/13447609	chromecache_111.2.dr	false		unknown
https://fonts.google.com/license/googlerestricted	chromecache_140.2.dr, chromecache_165.2.dr	false	URL Reputation: safe	unknown
https://gemini.google.com/gems/view	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://clients6.google.com	chromecache_190.2.dr, chromecache_126.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	false		unknown
http://localhost.corp.google.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://clients5.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://signaler-pa.youtube.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/inapp/%	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://drivemetadata.clients6.google.com	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/docs/answer/148505	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/	chromecache_162.2.dr, chromecache_166.2.dr, chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/docs/answer/37603	chromecache_111.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_126.2.dr	false		unknown
https://support.google.com/contacts/answer/7345608	chromecache_123.2.dr, chromecache_115.2.dr	false		unknown
https://csp.withgoogle.com/csp/lcreport/	chromecache_190.2.dr, chromecache_127.2.dr, chromecache_105.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_126.2.dr	false		unknown
https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f	chromecache_166.2.dr, chromecache_111.2.dr	false		unknown
https://scone-pa.clients6.google.com	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/a/default-user	chromecache_115.2.dr, chromecache_111.2.dr	false		unknown
https://support.google.com/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_162.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
74.125.0.137	rr4.sn-ab5l6nk6.c.drive.google.com	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	video.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	plus.l.google.com	United States	15169	GOOGLEUS	false
173.194.7.199	rr2.sn-p5qs7n6d.c.drive.google.com	United States	15169	GOOGLEUS	false
172.217.18.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.161	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.18.39.141	sibautomation.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
172.64.150.216	in-automate.brevo.com	United States	13335	CLOUDFLARENETUS	false
1.179.112.196	r1.mailin.fr	Australia	9723	ISEEK-AS-APiseekCommunicationsPtyLtdAU	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532906
Start date and time:	2024-10-14 06:52:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/128@48/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.186.78, 142.251.168.84, 34.104.35.123, 142.250.186.138, 142.250.186.67, 142.250.186.131, 142.250.181.227, 142.250.184.227, 172.217.16.202, 142.250.186.106, 142.250.186.170, 142.250.184.202, 142.250.186.42, 172.217.18.10, 216.58.206.42, 142.250.185.234, 142.250.74.202, 142.250.185.106, 142.250.185.138, 216.58.206.74, 172.217.18.106, 142.250.185.202, 142.250.185.74, 142.250.181.234, 142.250.184.234, 142.250.185.170, 142.250.186.74, 142.250.186.99, 172.217.16.138, 216.58.212.138, 20.109.210.53, 216.58.212.170, 192.229.221.95, 13.85.23.206, 142.250.186.163, 87.248.204.0, 20.242.39.171, 93.184.221.240, 142.250.185.195, 172.202.163.200
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, youtube.googleapis.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ogads-pa.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, content.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: gemini-1.5-flash	{ "text": "ALISEDA CARISA 2.mp4 Sign In", "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "Sign In", "text_input_field_labels": [], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: gemini-1.5-flash	{ "text": "ALISED CARISA 2.mp4 Play Sign In", "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "Play", "text_input_field_labels": ["unknown"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: gemini-1.5-flash	{ "brands": ["ALISED"]}
	{ "brands": ["ALISED"]}
URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: jbxai	{ "brands":[], "text":"ALISEDA CARISA 2.mp4", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign In", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: jbxai	{ "brands":[], "text":"ALISEDA CARISA 2.mp4", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Play", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: jbxai	{ "brands":[], "text":"ALISEDA CARISA 2.mp4", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign In", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view Model: gemini-1.5-flash	{ "brands": ["ALISED"]}
	{ "brands": ["ALISED"]}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (567)
Category:	downloaded
Size (bytes):	1672055
Entropy (8bit):	5.6137333999707275
Encrypted:	false
SSDEEP:	24576:EUB7Rn9mxRIcVyQenF/9dC1ES0f9gLsYYa:5B7IVeldC19
MD5:	A6EEB8738A5D40CECB57D946CC9C3380
SHA1:	816B6940047749ADA8C249D575B36F93E5C1B0D7
SHA-256:	6062321A141EF92786BE8161FCAE47AB437E94D600CA86E6D91A0A7F4B77A8E6
SHA-512:	C609B26D12987C58F4CFAAE230C86B8FCDBAC6ABCE7C6719FEBE78EBE91FCB52E2091698C03FBFDDF61EC10B71A8A234A03647FF7DA70F5AAE9E41AC2DB0548C
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/2f238d39/house_brand_player.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTIC

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2051)
Category:	dropped
Size (bytes):	14684
Entropy (8bit):	5.466852947616851
Encrypted:	false
SSDEEP:	384:IYikmqAScZ+Ad7y0B6nfCHa3rFC+5aiWQLHO91RIuW:IqmqAeA1B2KgrrW2f
MD5:	95028A4E3FD66AF73F1C6733C387208A
SHA1:	99E4FDABDDBA5CA768CB171E3726B4008A89AE6A
SHA-256:	3D49439AEE51F4DCB87B5C6B7910AA3145B0584F59FF6ABEFCC398C2ABFFC30C
SHA-512:	04F97D3D4CDC8C89018006F5C4470952DAB958CEC311A6C545BA1C304B339624AE09ED1D97401446B8619A6DC90B1180972280127B5793C316A287F2F39AE1DF
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	dropped
Size (bytes):	208050
Entropy (8bit):	5.527524198805295
Encrypted:	false
SSDEEP:	3072:HA2OL7g8WMo3NeigxLnrZyLAeE/s8vSz3gTSMzdGOCKqc6qmO+9maDhDWJPUBm1Z:ROL7Po3Ys0en8vP5GOCKaAGDWJPUBm1Z
MD5:	B53067A92A1A2972E65ACBD28C1BD4B6
SHA1:	73F76C08E36B3859382534FFD9F098A5A2AC8844
SHA-256:	ECC876C51AF40D46138AFC49ED08FB18ECB4BB8550F6587E8DF0C3E71FA67448
SHA-512:	CDBC28FA4A0A1FAC371C54B05614AFA8B6839FEF405AEB78880E8EF2D0106A28B4E59FB7BA1A7DCA99ABE1EA6EB52FED74B3AE6B61114EB757E972B5B96FE934
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.zh=(window.gapi\|\|{}).load;._.Lo=_.kf(_.vf,"rw",_.lf());.var Mo=function(a,b){(a=_.Lo[a])&&a.state<b&&(a.state=b)};var No=function(a){a=(a=_.Lo[a])?a.oid:void 0;if(a){var b=_.gf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Lo[a];No(a)}};_.Oo=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Po=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Qo=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Mo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.vf.oa){var k=d.id;if(k){f=(f=_.Lo[k])?f.state:void 0;if(f===1\|\|f===4)break a;No(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	downloaded
Size (bytes):	82296
Entropy (8bit):	5.592663724925133
Encrypted:	false
SSDEEP:	1536:brcg844kyv9f9wzJz6uKBLpLON1B5q0VOrGzIF7:AkyvFpLOHqmO2E7
MD5:	E08FA1D1755C4F8570B123C010325195
SHA1:	C496DDD8CBC293564E5FDF2D987833332F554660
SHA-256:	73C96E90B9C6A8E44AA7FA57F5A84A765AB2D1452E11B7B41882F2056B4BC393
SHA-512:	369B54AB94A768D44216962936D3DD948EAA688488D9C279FFCEEC2A2CBD4243FEFB2EADABB6C9D53243C3803EFBB5DC7E234CFC17EC5A9CA549AD4DE4141700
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1334007
Entropy (8bit):	7.999636673540646
Encrypted:	true
SSDEEP:	24576:iDfXTpOG0lbWsBnOrVsY1EzKisySUYSAS1o5j2fcROh6J4ylBpaq5tbfhEsWgNnI:iDfQ1pOVsRzbsy0Zy4CyOh6t/0q3JPWL
MD5:	7961AE1AD6936E855BF289E64BC89C8F
SHA1:	5BC450C083B3070E16BF7B511D01CE563639B3BC
SHA-256:	8E15CB9816DFE114C9F0203141D3CDBB5D4D788BE60C045689731AEC38E3E534
SHA-512:	7ADEE17FD46F89252404095118AE2AF74F2F83637F01E40702F687171131DED042A10A1929C5BE22AE5B391ACFCCE75477B5C20BC801FCCFE883E42055814DCB
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0...j............p..Q......uU..tB..l@..i.....EIG......;L....Z...._..>..k5......{'../...O..."....'...u....{...A..dH.....Q....3I...2^DadYjH.SU.kd.......I......(....rv..9....ZW.c...}.../.q.....Tq.oS.}d....jp.../.b.>..Z9}1.,.?.W.D...h...%.[......t.+........Z/h.}7...2. .9j&.&W.q`I.Z. ..~....-.k..\.G.-.JF.8.........J.....t%.L...Dg...L2.f...nx...C...Z!.........&m..d.*..-..o.U.QEOsP...j....OZ...iM......b.h.H%....:..?t.4Z..L...q..u...}.x8.. .j...6`6.r..c..-..B.....x.].E.M.xa.#.Y....s..A...:...pO...:..-/.`X..k..G.V.Z.-k..Bw....U.[...._.q..1.m<.w..s.1..!>2..W...x.Q....I.xr.u.J.....P..b.kAHv.{....x.=....../b....g..PKA....T.n...F.},.0]..b:..b....R...i....`..../!....`.y.kg^..t.w...!.t......k.M..../.7....[.u...4~..4%j...o.....no....l...wGrT.D{.F...n.B.?....z.7....Y.+Lw.r9.gs..\|g.....2m...&._...=LgV.......F.:Uz..w.HJ.........c...;.-......T.}c..\|og.SS.o..7.#.5...............`...C..w.............7...5.6.r....7.{J.6'S>.....!.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=98x9j3qfs8w9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (567)
Category:	dropped
Size (bytes):	1672055
Entropy (8bit):	5.6137333999707275
Encrypted:	false
SSDEEP:	24576:EUB7Rn9mxRIcVyQenF/9dC1ES0f9gLsYYa:5B7IVeldC19
MD5:	A6EEB8738A5D40CECB57D946CC9C3380
SHA1:	816B6940047749ADA8C249D575B36F93E5C1B0D7
SHA-256:	6062321A141EF92786BE8161FCAE47AB437E94D600CA86E6D91A0A7F4B77A8E6
SHA-512:	C609B26D12987C58F4CFAAE230C86B8FCDBAC6ABCE7C6719FEBE78EBE91FCB52E2091698C03FBFDDF61EC10B71A8A234A03647FF7DA70F5AAE9E41AC2DB0548C
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTIC

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	downloaded
Size (bytes):	2099327
Entropy (8bit):	5.644527794914939
Encrypted:	false
SSDEEP:	49152:a2AvseVC8Xq+lodGmBKQJnEvD0Ydtows214:AYx
MD5:	BAB36246C42676D5E9D782E885713EFB
SHA1:	AE2BFF2D3279C05F13B19A9D3A27FDF83E8E34C4
SHA-256:	2C6011F674606E38AE32D79F41991BEA88E1A8B69921D43FB7B5BE61E32F8A21
SHA-512:	6678CCCA7BA4C24E197FB46AA2D24B0FBDF46293B57C8246523679B6EE0CAEB8A179691F6D7A1BFB185DA0062FE694606BAA7FACE1CCB2D22FBFDE5E9D8F8E09
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.dovcpt-GeYA.O/am=ABgM/d=1/rs=AO0039uH9NA_yVkoWlil9RA8HucOLHt5cQ/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc1800, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	69236
Entropy (8bit):	7.965331272344109
Encrypted:	false
SSDEEP:	1536:JQd+lHi7FpzwxyLLcmosbuLbuLNUlX1i0TLSMF5kbwHzpB6FqoW:6L7TUxHBsbuDx1fAwHtB6Fi
MD5:	6A0FB159B42B636BAC90B7B99B7DEF93
SHA1:	623BB747C252B954F7FD06EC3510CB208961AE2F
SHA-256:	BB23C0CD6A2ABD9C4156D70001C57393219275618A7B5E2F48B14DE28780D5A5
SHA-512:	D673402E2BA06F51F7D96A6DA1B3DDFF0361ED2B474F8C3D09FE417A02349B250F16568D419B2EAD5166F12877C6AD7404DA2B3FEED65DD3537FCD2A543D9539
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... ......0..j...........p.....q..;.R.@..@(.e.......g.r....A9.N.......~.....?...\>......y...8....;.\|. ..X.CP".6..._]..4..A.hTPX..U.~...l..q{..p..U.....'.F.1B.o....Y2......*.K..r.L!H'1.[/Y...V.9qp5..-.;q.\.TO$8,4...$'.. Pci.+...`..Wv..xj.Q3z..Xg.a...@0.].b..q=.d....C+F......^xI.Xj.;G.._..e@B{..\.N.2./..f.?M]....ST3......>..G%.t....W`l.#<.h.q..&....F..k.,5.N..\|d@..ls.Y\.....L!@..o.h..T.;D....K..l.y...g.....<0..;h...E.!76.[.7.). ..\...d..L.H'...{.zK.[..b[...]..~^.1...o..b!....N../.............B...a.4!.....;.t........e..DE.>._.....d......w..P..%.....s.. W.+...j!...Gt3q...P....!^!V5R.F..).1......-.Q.v3`.A.%.uA.(F.....2.L0.Mt....h..Wu...\|{>>...\|.....v-..n.$.MC..www.3.....u..{...7{...w>F.).Tbw...e.N..n...].lb.y...G.....Fr....=.....P...A.7s..6....v{..._...H.I.....w'/.xH.a..U.o.\|.o.....H- .@.-y.!...S...I..A......N7..._..M.Z...:.~.B..\....:p9......~..n...CZ..KE>P.m=.=-.MDB..-.Z6.=/..#..1].;..(B.$P.......E.....F..GQ..g.d..}...6..

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2097218
Entropy (8bit):	7.9997668728178954
Encrypted:	true
SSDEEP:	49152:eL7QEhgZg0Qg+hOgUCqLx3ObDl3e4fLgAdvn/yGbZbDEwF:CqZg0uO9dx3sDzfLg4n/zZbDEI
MD5:	3E2FE42A1ED752FA38F5E6113F0B5A8C
SHA1:	A44093B605F1A04668CC0711A24424D8F3D3949D
SHA-256:	8C1491515563C3D944E3BC56513229E4A17C5182978F465D23F083E63DC5ABDF
SHA-512:	0082ED5F9CA10EB049D104F561F9EEDBD5668E242E48503DA2818A86C9D3F5CCCEF8605F00C9FC60C50AFEB30405892984134A1899FBE82F95B12DB884910C86
Malicious:	false
Reputation:	low
Preview:	.3....DCgR0Q6nyWw... .......0....j............p.............moof....mfhd............traf....tfhd....................tfdt......S.....trun.......x...$...R......................5.......8...............5........&.....................R~..............$..............$=......4.......(...............gm......O........0...............v......GG.......Y......+.......Pm......#.......&........&.......................F.......K......D........L.......l...............,.......m.......@..............C_......Le......................................D........}......H........3.......b..............5-...... .......................$........................Z.......9...............T..............f........h...............B.......................v..............f........................b......................'3.......4......Lw..............*.......$.......,.......3.......3.......6c......7.......8u......6.......9.......4...............3j.......<......2.......%.......$.......#Y......7................r......\)......

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4666)
Category:	dropped
Size (bytes):	924756
Entropy (8bit):	5.555053951406507
Encrypted:	false
SSDEEP:	6144:JYujQdDq8oPTvDGlTMd+dfMNUo/qKSkMhhys4I7X3/N/tViKv6C5vpKftU9FCTFc:JYgQdFikrIU+ejplVKCKftUW5IJdIrhQ
MD5:	ABDD92841D787893A424799FCBF11B95
SHA1:	DE22BA16B5AF5906D9B53226FA38EA5DA22F513B
SHA-256:	894D76515304F1DD8E1B362D25FDD30DC29CBDDFEF692A091CC8D7378C45A70A
SHA-512:	F7FD854D1F974A07D383C13B1B75526A8F88582B5C8E4F4D798424D2D43CA8C43305524BF48E1EEFD97A7C19E5884D57114C50580F64A05C935F0B28EBCFEF1E
Malicious:	false
Reputation:	low
Preview:	try{.A("dSirkf");..B();.}catch(e){_DumpException(e)}.try{.var BFc=function(a){if(AFc.has(a))return AFc.get(a);throw Error("vh`"+a);},DFc=function(a){if(CFc.has(a))return CFc.get(a);throw Error("wh`"+a);},EFc=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].Oq);return b},iN=function(a){this.aa=q(a)};P(iN,x);for(var FFc={CLICK:{string:"click",Oq:"cOuCgd"},GENERIC_CLICK:{string:"generic_click",Oq:"szJgjc"},IMPRESSION:{string:"impression",Oq:"xr6bB"},HOVER:{string:"hover",Oq:"ZmdkE"},KEYPRESS:{string:"keypress",Oq:"Kr2w4b"},KEYBOARD_ENTER:{string:"keyboard_enter",Oq:"SYhH9d"},VIS:{string:"vis",Oq:"HkgBsf"}},AFc=EFc(FFc),GFc=new Map,HFc=n(Object.keys(FFc)),IFc=HFc.next();!IFc.done;IFc=HFc.next()){var JFc=IFc.value;GFc.set(FFc[JFc].Oq,FFc[JFc].string)}.var CFc=EFc({TRACK:{string:"track",Oq:"u014N"},INDEX:{string:"index",Oq:"cQYSPc"},MUTABLE:{string:"mutable",Oq:"dYFj7e"},COMPONENT_ID:{string:"cid",Oq:"cOuyq"},TEST_CODE:{string:"

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.366768912648037
Encrypted:	false
SSDEEP:	6:hxuJLzLMb038GtrR1037fVBeQDXY2F6YkAbvOm/esHeOtrR11V4Nhdx434QL:hYA0pg79hLFBkAb2m/esHrH4Nbx4IQL
MD5:	90179346A20052391B11F147BF8B0675
SHA1:	AD85E91F82C14082FC50E66D3C06296977823705
SHA-256:	99628B6579951BB3D1982EFE446901FBE52964698A4E8FE77F8406DF91A574A3
SHA-512:	8BA19FB7AE8698C91C92F9E69CA7830B45AA16545FB7DA75A1521C6B984AC941E95531178D11B2699E3FA78CA9498B662AEC177D24ABACCE1615BCB4FBA51B24
Malicious:	false
Reputation:	low
URL:	https://content.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.7LPvRDgzcqA.O%2Fam%3DAACA%2Fd%3D1%2Frs%3DAHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script nonce="Tt2N8RyMlPEBXFa3mb_sSw">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async defer nonce="Tt2N8RyMlPEBXFa3mb_sSw"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	215998
Entropy (8bit):	5.52754936256635
Encrypted:	false
SSDEEP:	6144:ZjTUubqn2l6scNx5jZXhIU3BaPwoqKBfRHvcUNvp3Qsh7P8wOxgdYQ0CkrO49GuC:dTUubqn2l6scNx5jZXhIU3BaPwoqKBf3
MD5:	AF0F07E113167A5E6D4AC2CB8F87E6BB
SHA1:	99CF5800BB10F3E4D327CC3576895B040B522FF6
SHA-256:	FDA815749E0D7C49F927E571352252F2C09A5B9F055503A16C75A9F4CC283B63
SHA-512:	3A907F5CB278841DD9083FC2F40508F378AA679B87A4EBF17444AF09A9BF55E6E1EBCE6FF1FD079596E8A74B418E9A1B53F3CA2169D6D590215465469DFC9373
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{.var Je;Je=0;_.Ke=function(a){return Object.prototype.hasOwnProperty.call(a,_.Rb)&&a[_.Rb]\|\|(a[_.Rb]=++Je)};_.Le=function(a){return _.Qb(a)&&a.nodeType==1};_.Me=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.Ge(a),a.appendChild(_.ve(a).createTextNode(String(b)))};var Ne;_.Oe=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;c===""\|\|c==void 0?(Ne\|\|(Ne={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Ne,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Se;_.Re=function(a,b,c,d,e,f){if(_.tc&&e)return _.Pe(a);if(e&&!d)re

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1539442
Entropy (8bit):	7.999761051331047
Encrypted:	true
SSDEEP:	24576:NhdOsIHdJqXxt38NiE5F/shzX2HZVywVagCIEqEayrdHozfmkJ+NDtJckM1b0Mzs:fYsI9IBKNiEnkN+MwYgSqEBYmom0bpNI
MD5:	EBB1F4E3678F7D3EC9D31D7CC96F7159
SHA1:	F9B559A12FA9D087F01E466425625C645E9FEEF4
SHA-256:	00E53A4A09EA93A32FEE0D873F39626A0FB8D7518F73D8C7B1F1AFD6404724E7
SHA-512:	FD66A2AF1CFEEB227E3D1F73542E86B5430D4807B3894FFF637F65666CDAEAFAD4D6B583696D397FC8BE03C205E2CCEDA4C77C29141B1230511DAE81E1FC360D
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0...j............p..].....}@#...-.x<1.T@........{P.......t.......<.....!\|...s.!.].Rq.L...>......0..u..@.x..p....f....I.)....F).\|.'..........{.p=P..4\|...(./....?w.F..g...01...HzB.\S.9..$..w.Ih....o...(..?..Coe[...._]OM..7..........?.....t;.yM...k.e.s...;..-...cI.6Jy].Fb...>x...-...[K.F......1..dd......5.......h.D.h.,M...Qw.o.Y,.E.1.._........N....&.....1.I.u...&8....A.P%....&....!B.i.&F../.(..,...J.oBe...&.-._....-..!H....\|.....K...e.3^D..b_.F.<o....K...~......%p..F2........h....v5.j..6A...'..O..i..L.H.M... b...w..v..yH....."x.n}R[..w.n8..3...c.O.Z'.r.U.y>R1)>/8..+....?...@.D.c9..-..i..ve.2{.7..7.?(q..@k.Df........b@Q......E.]..[...7.uKQ..G.H.....'.}~..R.1......9..W:X..L.7.u.\\|.A...4..'.F@..yY...;...,..'.g..g..5..V.L..a..Y.J...-.Z....a...K..fL.R.\|.I_......OM"\^...)@...b.....h..f$.............s'.Zk...W.H\.y3^..M.}.e.~^.n(..{..;...J6...(`...<y9...-%[.!.-5[.Y....m$._..._..8..M.M.5.....d..........9.........[.M..;R

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1438
Entropy (8bit):	4.027376130804853
Encrypted:	false
SSDEEP:	24:4T4OSfPTrgdqa4+2I17+Kd7GXGI/BRkAqgzRXMxO+fi9pHjgvlqRE21/jKu9I98n:4rQmT2Yqy7GXGIBRkAqgVXMxO+fi9dj9
MD5:	9009B006F05FFE44DBCA681EAA6C715E
SHA1:	262E8B050C27D3B5C72779F901814BF74E684F6B
SHA-256:	616172BD5335FE9964DCA95557A942071C3DD3F3F7F54497303F976BF3F5B41D
SHA-512:	65E713F7E51FD24BFC4A6AA935EE33370BE7667C2233493068F7C57800DF0FABB4E217994B538AE85FA583AFCC70A3937EDCA1FB4EFF7C640C3D3BD9A3830498
Malicious:	false
Reputation:	low
Preview:	......DCgR0Q6nyWw... .......0.j............p..........ftypdash....iso6avc1mp41....moov...lmvhd.....!.x.!.x..]..a.H................................................@..................................(mvex... trex............................trak...\tkhd.....!.x.!.x.........a.H................................................@...............mdia... mdhd.....!.x.!.x..]..a.HU......Ghdlr........vide............ISO Media file produced by Google Inc.....4minf...$dinf....dref............url ........stbl....stsd............avc1.............................H...H...............................................2avcC.d......gd......-..P...........<`....h.<.....stts............stsc............stco............stsz................stss............vmhd................sidx..........]............6.......8...........8......,....8......=....8..........8.......:...8.......l...8.......g...8...........8......{....8.......~...8......g....8......O....8......8....8...........8......o!...8......F....8......t....8.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=rc8rogmamfhr
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	66672
Entropy (8bit):	7.825253836394355
Encrypted:	false
SSDEEP:	1536:RY5WLVK1ZLNNz0u7GgYZmv/jPJv7WhI3J:GJLNNz0u9Y0v/jPvJ
MD5:	F917339A5436AF4988FFFC533859E4BC
SHA1:	5987F98764C05ADBD4C8570D1A7DDFDB72FD338E
SHA-256:	7FA96FB1D64F385AD0D4A3ED24417F3DDEBB2A1430C42E69B54B3237DFB5FC6A
SHA-512:	CC127E201E8B6EC1D5BE078633C15D1B626706E3B25E85325FB6598D729A58D9B60065A7D7277901FCED686FDDB2D7E4795DC68407E96D76035176FDB9C1F997
Malicious:	false
Reputation:	low
Preview:	./....DCgR0Q6nyWw... .......0.j............p.....!......ftypdash....iso6mp41....moov...lmvhd.....!.x.!.x...D....................................................@..................................(mvex... trex............................trak...\tkhd.....!.x.!.x............................................................@..............`mdia... mdhd.....!.x.!.x...D...........Ghdlr........soun............ISO Media file produced by Google Inc......minf...$dinf....dref............url ........stbl...istsd...........Ymp4a.........................D.....5esds.....'.....@.....................................stts............stsc............stco............stsz................smhd...........[udta...Smeta.......!hdlr........mdirappl............&ilst.....too....data........Google...dsidx...........D..............x...........w<..........wa..........v...........w...........we..........v...........w2..........w,..........w8..........w?..........w)..........wm..........v...........w...........w........

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4666)
Category:	downloaded
Size (bytes):	924756
Entropy (8bit):	5.555053951406507
Encrypted:	false
SSDEEP:	6144:JYujQdDq8oPTvDGlTMd+dfMNUo/qKSkMhhys4I7X3/N/tViKv6C5vpKftU9FCTFc:JYgQdFikrIU+ejplVKCKftUW5IJdIrhQ
MD5:	ABDD92841D787893A424799FCBF11B95
SHA1:	DE22BA16B5AF5906D9B53226FA38EA5DA22F513B
SHA-256:	894D76515304F1DD8E1B362D25FDD30DC29CBDDFEF692A091CC8D7378C45A70A
SHA-512:	F7FD854D1F974A07D383C13B1B75526A8F88582B5C8E4F4D798424D2D43CA8C43305524BF48E1EEFD97A7C19E5884D57114C50580F64A05C935F0B28EBCFEF1E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.dovcpt-GeYA.O/am=ABgM/d=0/rs=AO0039uH9NA_yVkoWlil9RA8HucOLHt5cQ/m=dSirkf,sy7s,sy3w,sy4c,sy41,sy4p,n90YA,ZGAB2e,sLGWFe,sy33,sy43,sy5y,sy1l,sy48,sy4a,sy4q,sy24,M79aPc,sy1r,sy32,sy39,sy44,sy45,sy4f,sy7y,sy7v,syq,syr,sy11,sy1n,sy1x,sy2w,sy3x,sy42,sy46,sy49,sy4g,sy4h,sy4s,sy54,sy5j,sy5f,sy5w,sy7k,nJ4XF,sy7t,sy7u,sy7w,sy7x,sy7z,sy80,UKcSG,AtsVYc"
Preview:	try{.A("dSirkf");..B();.}catch(e){_DumpException(e)}.try{.var BFc=function(a){if(AFc.has(a))return AFc.get(a);throw Error("vh`"+a);},DFc=function(a){if(CFc.has(a))return CFc.get(a);throw Error("wh`"+a);},EFc=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].Oq);return b},iN=function(a){this.aa=q(a)};P(iN,x);for(var FFc={CLICK:{string:"click",Oq:"cOuCgd"},GENERIC_CLICK:{string:"generic_click",Oq:"szJgjc"},IMPRESSION:{string:"impression",Oq:"xr6bB"},HOVER:{string:"hover",Oq:"ZmdkE"},KEYPRESS:{string:"keypress",Oq:"Kr2w4b"},KEYBOARD_ENTER:{string:"keyboard_enter",Oq:"SYhH9d"},VIS:{string:"vis",Oq:"HkgBsf"}},AFc=EFc(FFc),GFc=new Map,HFc=n(Object.keys(FFc)),IFc=HFc.next();!IFc.done;IFc=HFc.next()){var JFc=IFc.value;GFc.set(FFc[JFc].Oq,FFc[JFc].string)}.var CFc=EFc({TRACK:{string:"track",Oq:"u014N"},INDEX:{string:"index",Oq:"cQYSPc"},MUTABLE:{string:"mutable",Oq:"dYFj7e"},COMPONENT_ID:{string:"cid",Oq:"cOuyq"},TEST_CODE:{string:"

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	389666
Entropy (8bit):	5.182552335516964
Encrypted:	false
SSDEEP:	1536:ENG8ZHMCbS/mgV3B8ILvPptpZ8p7M6oya+MOn4y6Ox5juDEnXrDJc7MsBy/n+TEr:ENG8ZimgZB7GoyVufJLc8QoGN
MD5:	4711A133DB57DF4A7F67FFE4C32D4E11
SHA1:	C335F69F0F85D49F193DDEEB23E3E3955D51FB26
SHA-256:	5EB6D784CACE211D13D7D67050F0BFD180698E3389230D8D192EF00B62ED63AA
SHA-512:	AFBC774DA55CF7CF39DA0F9712021F09ABC7E7CCFA702FB5159AF565997D7B810D6F20F8DE654BC658D89A2E3CF43BAF80D1F0F28B79832FA5323E6D44A435E2
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/2f238d39/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	253389
Entropy (8bit):	7.930224611156194
Encrypted:	false
SSDEEP:	6144:azQ3PVHluOwmKdX99HeYCzaoRoU/stNu37NIWt:azQ39LKdN9q2s/stNuWWt
MD5:	111EE2AD780579A11BEA521BEFAC10B6
SHA1:	A6188532E4E1F740196A86E20B5D14C4C708BF78
SHA-256:	748368B723B22AE501461E874DC7324A1679C4A89A5DFEFCEE60646C3C6F3C0E
SHA-512:	AC26A3FC0A470EA2EECEC8B0E28B7CA6BC12FAFB98068430D93FE8AC8D56B0F2C32860336103F648354F1CF1489B972046C54577413579E240553C3386F95F58
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... ......0...j...........p............moof....mfhd............traf....tfhd....................tfdt.......8....trun.......x...$..$................~.......................................=.......]......."...............M...............S.......d...............................P...............).......{...............................................z.......d...............................b.......................................6............... ...............................'...............`...............................{.......{..............+r.......................O.......,.......................a.......t..............................(................................\.......................................c...............v.......(.......................................................................h.......\|.......................~.......................H...............A.......(.......O.......n.......A.......................F...............(.......`.............."g

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2051)
Category:	downloaded
Size (bytes):	14684
Entropy (8bit):	5.466852947616851
Encrypted:	false
SSDEEP:	384:IYikmqAScZ+Ad7y0B6nfCHa3rFC+5aiWQLHO91RIuW:IqmqAeA1B2KgrrW2f
MD5:	95028A4E3FD66AF73F1C6733C387208A
SHA1:	99E4FDABDDBA5CA768CB171E3726B4008A89AE6A
SHA-256:	3D49439AEE51F4DCB87B5C6B7910AA3145B0584F59FF6ABEFCC398C2ABFFC30C
SHA-512:	04F97D3D4CDC8C89018006F5C4470952DAB958CEC311A6C545BA1C304B339624AE09ED1D97401446B8619A6DC90B1180972280127B5793C316A287F2F39AE1DF
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	dropped
Size (bytes):	126135
Entropy (8bit):	5.498654960721984
Encrypted:	false
SSDEEP:	3072:AkyvF6US20FCdrgVr3dfPeIofdhIUsTx0wVnX9Mb:AkygUS29rWPeIofdCVnX9Mb
MD5:	C299A572DF117831926BC3A0A25BA255
SHA1:	673F2AC4C7A41AB95FB14E2687666E81BC731E95
SHA-256:	F847294692483E4B7666C0F98CBE2BD03B86AE27B721CAE332FEB26223DDE9FC
SHA-512:	B418A87A350DBC0DEF9FAF3BE4B910CB21AE6FFFC6749EECEA486E3EB603F5AF92F70B936C3D440009482EDE572EE9736422CF89DCDD2B758DFA829216049179
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2097218
Entropy (8bit):	7.999733814650719
Encrypted:	true
SSDEEP:	49152:ARIpP0q/MpnLPdg+W4qLJnei0FY5iuJa5Ggq3WlsZNvNUKHpZz:uIpPFynT6+PqLJq+5iuYYD3WC+KJZz
MD5:	72677ED9137546D350267F5FACC9C637
SHA1:	4FB69B69E744D17452E451F3CF198C8CEC6E6883
SHA-256:	BF11AD590186D9F9E3161C50587C57B5B609D1F0DB7543BF94085862CD5FF7CC
SHA-512:	A825BDB574B6A41E9A61E0D260ED4B0DF59213F37A5EA89780830B35503E5C60ABC24C4188E790B3523BEC58E810DA9680D85C6641C60E773B692278572D5F3C
Malicious:	false
Reputation:	low
Preview:	.3....DCgR0Q6nyWw... .......0...j............p............moof....mfhd............traf....tfhd....................tfdt............trun.......x...$...6.......@...............\.......V......................................,........&......R).......m....................I......a...............................".......s........,......................T....................... L..............;/.......z......ah.............. .......!%......$...............bu.......%......%...............[................S..............Ok..............................)_......x................B..............%2..............!........#......)........8......<.......5.......;.......M.......L.......Q.......1.......A...............=........).............*k.......>......`........+.......l.......?.......\......,.......W........................".......................0......'.......B................................................w......&.......3o...............~.......j...............................!......8.......

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2221
Entropy (8bit):	4.325403074375605
Encrypted:	false
SSDEEP:	48:GDFOTWTY1jFTsC1qZ+LyLJwBj2moSqdob9BF5txF:GROKvTZ+LyLJWJ3B9
MD5:	1D2AFB26E737193F91A5AAD3C75C0DE3
SHA1:	626F28FF5F04A64540910A23B0B5D55113BF5271
SHA-256:	673500797DF5B4B960174DC824041B57B0C4828DC28EF3F2FF68CA6F0A1F0344
SHA-512:	04A0DAB3E0500A11C26AE44A01E14347D19FF9D9B15BF3C2ECE23F9AE833E709A1ACDA294A24BCDBA7D3A01D56C24887C347603E452FF26CF7528546B19044F4
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/metadata?docId=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&revisionId=0B3QU41VI6KVJNXdZZjRaYWRnQ2JTcWErWlhpcS9zZEtGTXlRPQ&userLocale=en&timeZoneId=Etc%2FGMT%2B4&documentResourceKey.resourceKey&forceImportEnabled=true&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{. "serializedDocosKeyData": "[null,null,0,null,null,null,null,1,[\"Anonymous\",null,\"//ssl.gstatic.com/docs/common/blue_silhouette96-0.png\",\"ANONYMOUS_105250506097979753968\",1,null,1,null,1],1,\"AAHRpnXs891kfRjBlLtDQ4uI67BLvDW5PmDhSL8wxAzNaSbpErFio-fzLpivNCgtAz55YOG2IHT9pWW_34OyoW5lR89M01qJZDw\",null,null,null,null,null,1,null,null,1,null,null,null,null,1,0,null,null,null,0,null,null,0,null,null,null,null,1,0,null,null,null,null,[\"tf\",60000,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,1,null,null,null,null,null,null,0,null,null,\"\",null,0,null,null,null,null,0],[[5703839,5704621,5704694,5704745,5705891,5707899,5711538,5712270,5712639,5712647,5713195,5714051,5737800,5792878,5799034,48966262,49372463,49375342,49472091,49622751,49623141,49643716,49643963,497693

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994)
Category:	downloaded
Size (bytes):	51460
Entropy (8bit):	5.679177313608103
Encrypted:	false
SSDEEP:	768:/k/i9OGvwPkqfjkP0/pOV41aIK6X62+kDMBBpuIsMvTeUOCriv6yDZXrvFSfI:GGYBjMJrB6jF4I
MD5:	DB9ECA96D73C63375C73DBCFD5338B91
SHA1:	B9B3E496FCEB642BA3B6DF9A2FD091E7D25F1AE3
SHA-256:	797BDBAA8D185918E081407C2141E448BAB3B428FD6C13C57D2619F1963EF895
SHA-512:	7B7DD6031541381742DE9BE567F9196365EE0C0EA467EC60E22799008D230FCA0A65A8B927042678E76964C56611A946595DFF7B9782FFE9526641F94410FC1D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.dovcpt-GeYA.O/am=ABgM/d=0/rs=AO0039uH9NA_yVkoWlil9RA8HucOLHt5cQ/m=sy14,sy8n,Tc7Qif,rJkXge"
Preview:	try{.var ptc=function(){return faa&&ha?!ha.mobile&&(ka("iPad")\|\|ka("Android")\|\|ka("Silk")):ka("iPad")\|\|ka("Android")&&!ka("Mobile")\|\|ka("Silk")},pL=function(){return!(faa&&ha?ha.mobile:!ptc()&&(ka("iPod")\|\|ka("iPhone")\|\|ka("Android")\|\|ka("IEMobile")))&&!ptc()};.}catch(e){_DumpException(e)}.try{.var zXe,AXe,BXe=function(a,b){var c=b.jscontroller,d=b.ym,e=b.zm,f=b.Th,g=b.gna,k=b.icon,l=b.ariaLabel,m=b.Ba,p=b.jsname,r=b.attributes,t=b.Ol,u=b.Cm,w=b.xp;b=b.Ie;b=b===void 0?!1:b;a.open("div","o9Wkjc");a.O("class",mw(pw(d,m)));a.O("jscontroller",c);a.O("jsaction",xw()+"focus:h06R8; blur:zjh6rb;mlnRJb:fLiPzd;");m&&a.O("data-idom-class",m);b&&a.O("data-use-native-focus-logic","true");(p\|\|null)!=null&&a.O("jsname",""+(p\|\|null));te(a,ne(r!=null?r:""));a.ea();a.ha("vbAlre");ww(a,"m9ZlFb");a.ia();a.open("span",."tgzVke");a.la(zXe\|\|(zXe=["jsname","S5tZuc","aria-hidden","true"]));a.O("class",e);a.ea();a.print(k!=null?k:"");a.close();a.open("a","LoUt8b");a.la(AXe\|\|(AXe=["jsname","hSRGPd"]));a.O("class

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3778
Entropy (8bit):	5.108997768922645
Encrypted:	false
SSDEEP:	24:D/lGBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBI:D/3
MD5:	EA2E0DBEB61DC89E37C4F3BCA15CBB48
SHA1:	BDAB688170BE30E124095E5FA36CAD6F7FAA87FD
SHA-256:	488BF9491A025004CA5EC645A4813A41E37DBC135A7108E93414800D11178E9B
SHA-512:	89AD55DED9883E2B33B1A2203A6001CD2CA19E915E01AAB8A31E2201461A550BBEE554D38900A164025A096F9A06889C74EC956E1038819095F131C970C53F94
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........*..8.>.@.K.#........in.wa.@...]....{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2658
Entropy (8bit):	5.146198177163282
Encrypted:	false
SSDEEP:	24:8MlGBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBH:5
MD5:	C3490FA58936EE63CF972DBD1A4B236A
SHA1:	EA69CD0AFE279466BE5B5709BDFE32A841B8EDFA
SHA-256:	35386F12EF0263CF56C739CF9C806CB86052FBBB9DA605592930A680791AE0DD
SHA-512:	4AB929A7F226B45E0B8C93CAB596B2572EC9E12BA61A4024D79065B2F418331238331A498949945392EC9A1C4AE20BA608CF78BDD675236A555EFACA23DF51BA
Malicious:	false
Reputation:	low
Preview:	RIFFZ...WEBPVP8 N...P6...*@...>.@.K.#........in.wa.@...]....{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	328876
Entropy (8bit):	7.969029578558588
Encrypted:	false
SSDEEP:	6144:eRpDlVhAjXhGo1InfHqqzDugiFrQIQ5zhuoJ54chIZHsWLFU1C+L5fOYM8T:2hlVExGqIyeFih3QJJGchOHs8D+J0i
MD5:	04004952D80DA7972CFCFF8F2ACA69F0
SHA1:	5DF9CE66C2CEC146F479244F73B551976F2E3A05
SHA-256:	BF5F9D52C6AD868290A3E258209D4512EE05DCE4C275273042CE2EA05CB2E587
SHA-512:	14D0BFE7C662918A233BB17F8BCBF5B8895776068E052328F51E2F4B4C08FACA40490541A3E71746C3EB2256453AC11198E881D379B773278697072D380BF1EE
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0..&j............p....#(.;..g..>.s..#....u..Fz$.B.t...`.I\|..x.\|......F.e...8.......`..Ta...9..[...s..g.e....?]...0..!........c....VF]IH......c.....>..$..n...V.D!.W..l..}\|.....&..F..U\..32<^.\|...R.#..z..xP..S.4.\...!..J.#QR..UXh...K'.N5.I.H...3K...5.2Yt.u5z...Ni$......W.$.f..vq.V{;...HtJ8.n..Pm.g$..\|dJh...'b.......)....D..^nz..?.w.7_.j...&..........x..[z....9&..kq.[.>...z... ^.\...O....S.`.t)!J.#..j..A......zA.{oi.lNW...R.Q..w...a.?W.#.1_R...0.....q..\|...W...[.o....0.{....U....(.=h?ze..I.H....'.o7(.N%i}..U9......7.By.{.].<.....?.....\|<..v!......b..@AT.-....D.....V"...Q...t.j.^..;..."..F...........18........].cS...w.A%5w..w.}!\|.A..#.&...N.3Z..L..,.^.....H..b:%...X.S.........'.X.K1...mTTX.S..$.0vy...R...;.!CR...x...1..........M28...dj..l...\..Q^...X.U7.ST....Z..V0.....5.w..1.B4...#...H.d.@..E..7ne.M.....[..../...ey*..r...`2.......Rp2..{0Q@.~...wT.b.(O.3.&5..D.a..!......D..T.Z...v....<...8Iv..?.E.3..l.0#^q...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2658
Entropy (8bit):	5.146198177163282
Encrypted:	false
SSDEEP:	24:8MlGBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBH:5
MD5:	C3490FA58936EE63CF972DBD1A4B236A
SHA1:	EA69CD0AFE279466BE5B5709BDFE32A841B8EDFA
SHA-256:	35386F12EF0263CF56C739CF9C806CB86052FBBB9DA605592930A680791AE0DD
SHA-512:	4AB929A7F226B45E0B8C93CAB596B2572EC9E12BA61A4024D79065B2F418331238331A498949945392EC9A1C4AE20BA608CF78BDD675236A555EFACA23DF51BA
Malicious:	false
Reputation:	low
URL:	https://drive.google.com/drive-viewer/AKGpihbsYuRPXht5N3qTymeAiJ0CP1I58g8-Tyx5BFqtshSJE0_PVZ-tk7G6s_SraY6NWh4CqJLgs5B2Ag8zlojzedRc816LtsYMfXQ=s1600-rw-v1
Preview:	RIFFZ...WEBPVP8 N...P6...*@...>.@.K.#........in.wa.@...]....{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2097218
Entropy (8bit):	7.999729650342997
Encrypted:	true
SSDEEP:	49152:rDlNoStEmMOt11q2Y+KHWa92/Vp6AHcWCcei:rDlN6mMW1c2qXAHrCcei
MD5:	11B7797340FE6E559E48629A25F68B92
SHA1:	269BD92A0EE93C90625B3E44F13AB094F9189217
SHA-256:	8AE8B7B90F2D5EE3C0B32835403212C9C2BD6F1850FADC2A39EB6E3B7427E2AF
SHA-512:	8DC82C84792677E557E0EED75C3FD92A07584746E55E9248283D20421185FCD3DB3B4B5899BFDF34E9254FA017AD051A266DF73E0BF01224BCA7474B30078826
Malicious:	false
Reputation:	low
Preview:	.3....DCgR0Q6nyWw... .......0....j............p.............moof....mfhd............traf....tfhd....................tfdt...........trun.......x...$... ...............(......x................~..............3u......%........x......I...............$........%.......W......Wn.......#..............`.......$".......2..............UI...............o..............z........[.......W.......,......-6...... ........n..............P0...............K..............>P..............................h................l......3>...............`......................:.......8........+...............(.......2......5...............-^......E........n.....................$"......................@........q.......K..............+........c......0...............9E.......'..............$D.......q....../.......................4......!K......D........................x......=...............H........P..............^l...............................o......!......."........U.............................."...............

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	338887
Entropy (8bit):	5.617055470585628
Encrypted:	false
SSDEEP:	3072:xXtQxK+QV+NYVNzqZfPqtnASf1eVvjH5jBppma6QXQ7MBE4at9hYuPe:xXtxT+OVNzqZfmfoVLH5jHjXQ70Eltsr
MD5:	C829EE359F72EF5325D2E55665B0F041
SHA1:	DFAB768EDB87D694EA0B3C8D474C9D63CADA8C74
SHA-256:	065A795F6772077EB6FBD442E9B00D60DC79A56D3D9B7DA62A9FEC3858E27A95
SHA-512:	FACBC2BA48B1AF877D0A0B62001E0091F729DBB0330DAE2142CA721878F99432ED3CC8C3D1BA5F4D5F27E486F390C92CE89131A9EEA6F0F9D7D20AE1A0AA0A6F
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	301179
Entropy (8bit):	7.967388590187102
Encrypted:	false
SSDEEP:	6144:BJyJe2NX4Gixt0i8p6uezatJCPXkRN4ouLwB6o/Ku0BwcTAE4:3yYgXktkkueiwXGNC8Br4AE4
MD5:	A81A85ADE559E9D3EE311CFD3BE34C42
SHA1:	5DC8AA8A3C266A14645D41805B18FE41F3C0F917
SHA-256:	CF0370EDB71649998AF22A4217AE9C7E7237FCBF839BB530DF632D5BC1E2C39F
SHA-512:	2FE9EDEF0BBE74473B9961CDB5B3CD9001AA40160CC5B17C3601F012536E60AB30142DFFFE49F6E7A7FD9D24B41934F42038F19CA111D7C02219A7EC8BCE2456
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0...j............p......$.....moof....mfhd............traf....tfhd...*....................tfdt......p.....trun........... ...a...........J...c...T...d...f...........Y...e..._...]...Z...l...n...f...s...........U...b...n...j...c...........M...]...[...g...].......Z...^...g...r...s...j...n...s...p...p...........m...]...b...a...f...........^...f..._...o...Z.......Q...U...k...l...g...g...m...x...m...i...r.......f...g...l...g...o.......]...W...e...e...o...m.......i...e...p...s...j.......r...x...........x.......^...d...`...h...p.......X...\...x...j...u...j.......b...k...t...`...h.......h...e...e...k...s.......p...i..._...h...a...........U..._...T...T...T.......V...b...b...d...d...m...p...m..._...l...m.......K..._...k...a...r...........P...a...[...d...e.......Y...r...c...c...].......u...d...[...a...[...........Q...R...W...`...........?...U...R...Y...b.......Q...M...X...U...]...^...m...i...e...y...........F...]...^...T...~...Z...c...a...l...i...m...........e...l...c

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	772
Entropy (8bit):	5.4873420908405555
Encrypted:	false
SSDEEP:	24:hYM6MxjOE0pb2ykRoXQJd0YhjTdz0YmN14NM:TBxjOE04yGogJdhndPDNM
MD5:	07DF2F842A74E8CCF18C280A1C7E5BCC
SHA1:	8AE90A24B718D97417A845E7A4F758444769AFA6
SHA-256:	57D0BE058B6CC7E0BCE030D118D5ED86CD66B1DA1F357C6DB3649191F255501D
SHA-512:	0073ED9CDCC0796D57AFC1A1EB94B1D225ED61E7A53D3D41DE5D38559F98EDA1B99A8857C30B4C98B84B734BCF4C9E56CA546640586B35E0ED19C316F648BAB5
Malicious:	false
Reputation:	low
URL:	https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z
Preview:	<!DOCTYPE html>.<html>..<head>...<title>Redirection</title>..</head>..<body>...<noscript>... <meta http-equiv="refresh" content="0.0;https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view?usp=sharing">...</noscript>. <iframe src="https://sibautomation.com/cm.html?id=4489679#trans=0&user_id=210193" onload="automationOnload()" style="display:none;"></iframe>..</body>..<script>.. var autoRedirectTimeout = setTimeout(function(){ top.location='https:\/\/drive.google.com\/file\/d\/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM\/view?usp=sharing' }, 3000)...function automationOnload(){....clearTimeout(autoRedirectTimeout)....top.location='https:\/\/drive.google.com\/file\/d\/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM\/view?usp=sharing'...}..</script>.</html>

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27287
Entropy (8bit):	5.579593180974075
Encrypted:	false
SSDEEP:	192:o/K/XMymiG3+Ul5mEYkjmbqGIwDRhKZqxydFUt/s31Zi53x/iGZEjPYmbqGIw4eW:/TyAq7YPyvqwzfmJq+/
MD5:	5319C9FC87A8A221A59DFA9991C8701A
SHA1:	915C6433ED10B7EE353035A0FFB5D7EA389FB65A
SHA-256:	25CE1A352D58E61D6C909BB85FEBB2CFFE84DE03E33F3183C667D577BB3D320B
SHA-512:	DE56C88360083E065D93FAD315EE7701B20781A8E3777F614B78C727C83FE83364F8CD93A1290F4EEEFB6CE0A9B2AC0ADA9DEEEC8D0B7D7346A39DF03D0EC287
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	downloaded
Size (bytes):	6368
Entropy (8bit):	5.393709113390338
Encrypted:	false
SSDEEP:	96:hOw/bYdpLNJUij4Eg5gvsSPgdpjOImpY50GXKAJ+sARNfk:sMYRmEgg7PVpY50UKAglRNfk
MD5:	804991CC8CA6510988BA76D7AF841B04
SHA1:	C64C40F6DB1020CE7E79FBAB440D7EEF78AF732F
SHA-256:	40E9CC173EE98CA7E6B693A528673EC1534328C2EEC34536059F63E3F487FDDC
SHA-512:	230C307E961812B5B6A8A5692D3BF0133FFFDFC36521553E978920EFBF6DE9801B45C56396CF7CA1119D763CA28ABEBA18832D68B6468798558ADD4C8A1C99B3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.dovcpt-GeYA.O/am=ABgM/d=0/rs=AO0039uH9NA_yVkoWlil9RA8HucOLHt5cQ/m=MpJwZc,UUJqVe,sy3,s39S4,syl,pw70Gc"
Preview:	try{.A("MpJwZc");..B();.}catch(e){_DumpException(e)}.try{.A("UUJqVe");..B();.}catch(e){_DumpException(e)}.try{.Cf(iy);.}catch(e){_DumpException(e)}.try{.A("s39S4");.var Klc=function(a){if(!wva(a))throw Error("G``"+String(a));},Llc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),xTa(b,!1))},Mlc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return dh(e,":.CLIENT")});Ca(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);Gka(a)},Qlc=function(){Nlc\|\|(Nlc=!0,Olc=via,via=function(a){Olc&&.Olc(a);for(var b=0;b<a.length;b++){var c=a[b];lf(c)&&Ef(uf(c)).hSa(c)}},Plc=wia,wia=function(a){Plc&&Plc(a);for(var b=0;b<a.length;b++){var c=a[b];lf(c)&&Ef(uf(c)).iSa(c)}})},Rlc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-c

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	215998
Entropy (8bit):	5.52754936256635
Encrypted:	false
SSDEEP:	6144:ZjTUubqn2l6scNx5jZXhIU3BaPwoqKBfRHvcUNvp3Qsh7P8wOxgdYQ0CkrO49GuC:dTUubqn2l6scNx5jZXhIU3BaPwoqKBf3
MD5:	AF0F07E113167A5E6D4AC2CB8F87E6BB
SHA1:	99CF5800BB10F3E4D327CC3576895B040B522FF6
SHA-256:	FDA815749E0D7C49F927E571352252F2C09A5B9F055503A16C75A9F4CC283B63
SHA-512:	3A907F5CB278841DD9083FC2F40508F378AA679B87A4EBF17444AF09A9BF55E6E1EBCE6FF1FD079596E8A74B418E9A1B53F3CA2169D6D590215465469DFC9373
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.6T6r_9V_Ciw.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTuWzR02q-lADuEe1tzdVix-MATZjg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{.var Je;Je=0;_.Ke=function(a){return Object.prototype.hasOwnProperty.call(a,_.Rb)&&a[_.Rb]\|\|(a[_.Rb]=++Je)};_.Le=function(a){return _.Qb(a)&&a.nodeType==1};_.Me=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.Ge(a),a.appendChild(_.ve(a).createTextNode(String(b)))};var Ne;_.Oe=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;c===""\|\|c==void 0?(Ne\|\|(Ne={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Ne,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Se;_.Re=function(a,b,c,d,e,f){if(_.tc&&e)return _.Pe(a);if(e&&!d)re

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	downloaded
Size (bytes):	126135
Entropy (8bit):	5.498654960721984
Encrypted:	false
SSDEEP:	3072:AkyvF6US20FCdrgVr3dfPeIofdhIUsTx0wVnX9Mb:AkygUS29rWPeIofdCVnX9Mb
MD5:	C299A572DF117831926BC3A0A25BA255
SHA1:	673F2AC4C7A41AB95FB14E2687666E81BC731E95
SHA-256:	F847294692483E4B7666C0F98CBE2BD03B86AE27B721CAE332FEB26223DDE9FC
SHA-512:	B418A87A350DBC0DEF9FAF3BE4B910CB21AE6FFFC6749EECEA486E3EB603F5AF92F70B936C3D440009482EDE572EE9736422CF89DCDD2B758DFA829216049179
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	338887
Entropy (8bit):	5.617055470585628
Encrypted:	false
SSDEEP:	3072:xXtQxK+QV+NYVNzqZfPqtnASf1eVvjH5jBppma6QXQ7MBE4at9hYuPe:xXtxT+OVNzqZfmfoVLH5jHjXQ70Eltsr
MD5:	C829EE359F72EF5325D2E55665B0F041
SHA1:	DFAB768EDB87D694EA0B3C8D474C9D63CADA8C74
SHA-256:	065A795F6772077EB6FBD442E9B00D60DC79A56D3D9B7DA62A9FEC3858E27A95
SHA-512:	FACBC2BA48B1AF877D0A0B62001E0091F729DBB0330DAE2142CA721878F99432ED3CC8C3D1BA5F4D5F27E486F390C92CE89131A9EEA6F0F9D7D20AE1A0AA0A6F
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/2f238d39/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	65595
Entropy (8bit):	7.977430959435794
Encrypted:	false
SSDEEP:	1536:ZyuMza7JaHMX9jlyEBCEGgC8inx8nymvRZdX7x03/B:Gz8gHE3ycCXx8n5vRZt8B
MD5:	B116BB05CD58E28FCB63B6CA5442BFCF
SHA1:	B6F268889AAF93EF8F443ED8DE163DDCAE0BBDCA
SHA-256:	3C8E5489CCDC0BDC486DCE238A98629C28804F66E1CC995A76F8EEE1F51E1296
SHA-512:	F740F96611CA11886E38EA78D8D9315E8CD6C3FADCEDE57E484DF9702259C354AA36D33ADBD9B45EC1651AA57253E77711A8375C8020ED113A30D5B9A84F0175
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0...j............p........8.:_.c.\|R#U..}..u.......\QJ.R.D...X......P.S@....".ZJ..z_.n..<@.M.....6..t.....@.r..R!X(3@.F..6p)....,_< ..~NsVWP.-......D.._I4J.;%....p...T.W.6u.S...v..."Y.,..g..;g..c.z.....u.z.<.K.yG...K.4..=.T...p...T.S..^.!.....B.....+T... .....+..II.:...N#aV.I...G...[Z.K1...2...#..M.rU..9.i.:.\.l.A.t.............Q~.C..........?.{a.&......f..f..^m..G.B.X\i.4....U.....F ...g.MP(..cR.:r.6..RAN&.J.4.w....7........MN2.l.Q)R._.2.N........'Z..$kM.Q..s....r.".aC......5d.)..q8...b.t%..-.....]j.g.8,-.M3N}au.G.dH..H......s....+.3.!.6.E,...)..,...6. i..8.V..F.2GO!.....a".. 5D...(....p.))XJ...L..T%`....rG.Z..0.m..P>o.........,..z<x.sw.1.\|.J.Ov..(.r4...3.8=...i.L.+.:]M..u.PT^u.V.e..mU?%.....hS.8..S\.Z......Zo\|)T..B)t...x.5j.......v..b.k.V.f5:P.x..rJQ?m$7...@.@$r.i.z.)j,{&.<.;....jg,..V..-gxWy./...p.8..j..e.....,.nn}....m..Dw..4...8..n.@yd.7....+.\SS\|...;p..M.d.5..9...!....b..J`.......7:].3.-2V..Vm^<\\.....^!.....

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	130313
Entropy (8bit):	7.871738264405982
Encrypted:	false
SSDEEP:	3072:WCq03Oi0EPe7wvML2IVb5G/d26sRvjDvoDOIQzYm70l4r9h:Wb8G95GFDstjUvCf70li9h
MD5:	AE4213A244C8E8315C4B1F8B37468A7A
SHA1:	98374B6A7DA736F9DA16C20256BF96791E4C9C96
SHA-256:	14D8EA39DB90BF474D8A3F5BC2A05E641ED1A050590ED4F3F38BBB860AFF4949
SHA-512:	89D41F30FB8DB1E9EB9FAF3E1FEA62A75D0722F0285963422DA566251C492A73BB2BB48F750A1DF1E218965C4383D0EA92A535982B0F28F1AEF0F7FD3ABE2775
Malicious:	false
Reputation:	low
Preview:	./....DCgR0Q6nyWw... ......0.j...........p............ftypdash....iso6avc1mp41....moov...lmvhd.....!.x.!.x..]..a.H................................................@..................................(mvex... trex............................trak...\tkhd.....!.x.!.x.........a.H................................................@........h......mdia... mdhd.....!.x.!.x..]..a.HU......Ghdlr........vide............ISO Media file produced by Google Inc.....3minf...$dinf....dref............url ........stbl....stsd............avc1...........................h.H...H...............................................1avcC.B......gB........Z......} ..p.......h.<.....stts............stsc............stco............stsz................stss............vmhd................sidx..........]............6...m...8...........8.......1...8..........8...........8...........8...........8...........8...........8...........8...........8.......#...8.......k...8.......G...8...........8...........8...........8...........8

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1412643
Entropy (8bit):	7.999750045686726
Encrypted:	true
SSDEEP:	24576:ifkxsmA3T7FYPxEa5+JiBph20LqeWobJMCXv/zhO9Vj0gagIbikE6Crz:iv7WJEm4ahX3bJMCXnzhO9na1iktCrz
MD5:	CCA46EA7BB3AA98A2AA9E0A00EE636A9
SHA1:	FB91590EC84959D6540535BD89D3C038936D937F
SHA-256:	D641E9119FF88A1EE844F8E0B0DA079DD3AC82610D1955E7C0E058FF78BB9CDD
SHA-512:	F8A7D546A4FF46DE12CAE86699BF4AD495223ECE60D18D55AA02D70CA11EF8663A086F41016745F3A3166B44DFD650AEE0AB0012DE24530167669AD617E65643
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0....j............p.V......e.V.........}h....D..\.+..f.C.91;.........{.[......^..L.d..t.rx.)v..Q.)..0..t.~..+z....pF......7.......8o...z.r,',:u...j..8./..)..3.U..x.v..af4./.b.m-..3.v.2r.IZ..........&..... .y=.:..:.Fo..9.MX.\2.W...t.$..:....9.....-.a....$.(.c@.H{....T..'..a....].9...X;..U..F....&.o......_.J....+...E...Y.C>5Zl6.L....)p1.0.r.d$)F^.+V........v..c4..&<.......dU...HW..g....C..wF..m5...V....$..1TC ...&..0...I6...+J...=....D.^.8.[..........[..Y.O..~nC%&.jjT5jUSG......9...Iv.~..3\|..*...#..=...A.,<{>......LIW....\....pY.}.1%....n.8..!OSc.Wl%..-..{...+vxO].?...........H7o....n7..=Z .6.3J...../?.Z.,{.(..!.E4}`.rZ.p.....c.8...+-\|...I.F5..#...-..!........#...ZH.x..).I.8.cR.?V..M.~..[.......Y.).l.....Z....m..P.hB9<T..&.?.u..1h..v#Pqr.....c8..Dz.Fm9.x.+L...9Zh.T(.:`..7.fmj>.Z.]..>Vx<i....h..a\|.C....#..[.L,.N.o%.d0z+..D.........4AU~...p.%..@.._......`...R'..K....B..4i`..._.....A.NH8.v0]a[f>....s..G.....&.>.o...=..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x288, components 3
Category:	downloaded
Size (bytes):	2008
Entropy (8bit):	0.8151360693602315
Encrypted:	false
SSDEEP:	6:tJn/FnnbgZzMnnsMntDOImMqR3xl/l9msK8:tp/dbgZ4nnsMtDObTxl/TM8
MD5:	22335FE58C035B960E784A20F0EC27AA
SHA1:	7A7786C88A2419D2F296F9E702B53C0FC7D1E729
SHA-256:	9B4347C2B891A2C55262E1ECCC1D9351AC268B3FDD649D29D8009B7D97361238
SHA-512:	6AE11FEDC02075089B0AF764C6E054C3C7EB1952B742DE7BBE26CFDE5E908203DA686E665A7B51B3EFEBB6A01F4AC44EF5E46B9100D802F5CC84466055EC5779
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/drive-storage/AJQWtBP51xmDayO177Cu2hlTmLgPBm_fdzpys_Wjx3cxmGoJnkQ5Clw0h8bHEzH99AuRaHAcAujFc8xx6IbDxJfjQM-jkya0wb50YqSG=s512
Preview:	......JFIF...................................................................................................................................................... .................................................................................................................?..@..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	2445
Entropy (8bit):	5.211760601931229
Encrypted:	false
SSDEEP:	48:gmJTXIbrUqckZNrUczx+x2SnggByEe9w0NW:gIT4bAqckZNr/G6rW
MD5:	B88D98D3F369286275E17ECBB5FF90D8
SHA1:	109FB224DF16850B7C54B916D3C5685E5737CD37
SHA-256:	E87C510B98493A7BB00D71EB55B50F84E9B2D9F1B80A32DCFBC5E6EBACF5E810
SHA-512:	C0B7EFF9C7A276900E165E56688DD1C87F15E0B815144DD661A38608D8F821FD2A5AF36B7C7DEF3AD31EA61DF20D53EA5D0EBCA7DA29DE7465DDDFAD0520C921
Malicious:	false
Reputation:	low
URL:	https://sibautomation.com/cm.html?id=4489679
Preview:	<!DOCTYPE html>.<html>.<head>.<script type="text/javascript">. function uuidV4() { var d = new Date().getTime(); return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c){ var r = (d + Math.random() * 16) % 16 \| 0; d = Math.floor(d / 16); return (c == 'x' ? r : (r & 0x3 \| 0x8)).toString(16);});}. function rq_send(d, cb) {var l = 'https://in-automate.brevo.com/cm?' + qs_encode(d), x = new XMLHttpRequest(); x.open("GET", l, true); x.onreadystatechange = function() { if (x.readyState == XMLHttpRequest.DONE && x.status == 204) { cb && cb(null, this.response);}}; x.send(null);}. function ck_set(n, v, y) { var d = new Date(); d.setHours(182 * 24); var e = "; expires=" + d.toGMTString(); document.cookie = n + "=" + v + e + ";path=/;Secure;SameSite=None";}. function ck_get(n) { var cn = n + "=", ca = document.cookie.split(';'); for (var i = 0; i < ca.length; i++) { var c = ca[i]; while (c.charAt(0) == ' ') c = c.substring(1, c.length); if (c.indexOf(cn) == 0) retur

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1597069
Entropy (8bit):	7.999728358717441
Encrypted:	true
SSDEEP:	49152:I5EXRJUIDWqChZa+Zl5mPQwh99tTU6ES+:I5CvUeTSvle99t4HS+
MD5:	EA14513AC14591ED6CF193EBC5105B07
SHA1:	3709A1738CC7C91277DFB84918F8FE1B0BC75417
SHA-256:	C66F73B61361A8F4781DC68DA9B7F75EAD73DB7DFD7A6DDA45BE8FB9CBAFED51
SHA-512:	C0DABEC36B4403AFE6636266D1BE8858501E871CB63BACB0768B885BDEDD0C3BA6CA4AF6E755EADA3DB033425DB65706E070214E49A89AD60AB3B7E8A3C8A986
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0...j............p.a.....!....r..>%....j..3.-..z"..NNT.7..9/A..z.....Y7.]e..R.okc.Z.Y.....7....p.[.......].U.fI.....D.l..<.Y.4...g[X..7.)...T....O..t.....'.u.../B.....0....Zv......o....}\............9...P.y.YVa...BU....J31G.O.Q..'......0.[ De....=.............l.Q.\.~..O..z#DB......."...I.d.o.}W..s>..j.;\|H^.N;.......?z....E1.....B%\|.....~.!,...Ia.}t..~$c.X/...u.h..................;M.v..H>D.Q.......^0....n~.d...=.zk..9{.NO~....&...}.Z.!..&.#X..a.AT.9J....(7......j.-..fK..%.......C.._..hy..`/...v...Y...........YD[...$..}...6.F2h=..D@zg...".fd......".q...2D.I.O.L.G.N`.........y\|-..w1...-...6..N..c..-]...y...Dz.{_1`..]......N...5.<l...s..._:..f.'..a..m[.c.z..k.c..\y..c....]...pI.Dp....K8.~p?...R....bg3.rw%........@oX..1.o..2........D.C!.....g.h....tg>+..a._..h.r..J`.9D.].C...._..,4x.}e....C...Z.B#.v.53..V.@...p.\A....M.8Ss.eXO.8U........W...4.Z.*.g.:~/..;......#...\|..g...L.....]V].Lv.....o./'.l...6S....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994)
Category:	dropped
Size (bytes):	51460
Entropy (8bit):	5.679177313608103
Encrypted:	false
SSDEEP:	768:/k/i9OGvwPkqfjkP0/pOV41aIK6X62+kDMBBpuIsMvTeUOCriv6yDZXrvFSfI:GGYBjMJrB6jF4I
MD5:	DB9ECA96D73C63375C73DBCFD5338B91
SHA1:	B9B3E496FCEB642BA3B6DF9A2FD091E7D25F1AE3
SHA-256:	797BDBAA8D185918E081407C2141E448BAB3B428FD6C13C57D2619F1963EF895
SHA-512:	7B7DD6031541381742DE9BE567F9196365EE0C0EA467EC60E22799008D230FCA0A65A8B927042678E76964C56611A946595DFF7B9782FFE9526641F94410FC1D
Malicious:	false
Reputation:	low
Preview:	try{.var ptc=function(){return faa&&ha?!ha.mobile&&(ka("iPad")\|\|ka("Android")\|\|ka("Silk")):ka("iPad")\|\|ka("Android")&&!ka("Mobile")\|\|ka("Silk")},pL=function(){return!(faa&&ha?ha.mobile:!ptc()&&(ka("iPod")\|\|ka("iPhone")\|\|ka("Android")\|\|ka("IEMobile")))&&!ptc()};.}catch(e){_DumpException(e)}.try{.var zXe,AXe,BXe=function(a,b){var c=b.jscontroller,d=b.ym,e=b.zm,f=b.Th,g=b.gna,k=b.icon,l=b.ariaLabel,m=b.Ba,p=b.jsname,r=b.attributes,t=b.Ol,u=b.Cm,w=b.xp;b=b.Ie;b=b===void 0?!1:b;a.open("div","o9Wkjc");a.O("class",mw(pw(d,m)));a.O("jscontroller",c);a.O("jsaction",xw()+"focus:h06R8; blur:zjh6rb;mlnRJb:fLiPzd;");m&&a.O("data-idom-class",m);b&&a.O("data-use-native-focus-logic","true");(p\|\|null)!=null&&a.O("jsname",""+(p\|\|null));te(a,ne(r!=null?r:""));a.ea();a.ha("vbAlre");ww(a,"m9ZlFb");a.ia();a.open("span",."tgzVke");a.la(zXe\|\|(zXe=["jsname","S5tZuc","aria-hidden","true"]));a.O("class",e);a.ea();a.print(k!=null?k:"");a.close();a.open("a","LoUt8b");a.la(AXe\|\|(AXe=["jsname","hSRGPd"]));a.O("class

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1527967
Entropy (8bit):	7.999735734670553
Encrypted:	true
SSDEEP:	24576:kX94HhFlv6AUf3EzIPUzqh8/r0P6VHI8XQh584idPR1gHMr9Mnr6CSEdH:AKBFd6AU/tPf/PsIlh5/idJM/r6NEdH
MD5:	8D49CFF4BEE95BCBB8E80491F6D8A844
SHA1:	2F7D3DAD866292DFCE3318B45AA58894CE05FEB7
SHA-256:	9EE92BB852B9F39A164749EF7E5FA80C192BF91C37918C3A01CDF2FFFB253C48
SHA-512:	2C111ACCE2EC613ED8275160EC9CABC137286831E1B86C56C801C9AF67E29B090FBC5A9D065E475F924BA4C9C14BDC6461CF5D9D93A5A842BF5B8CC4596CCBF9
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0....j............p.].....c...$}Yv...D5..}.J...v...c.;a.T......+....8..q..{...<.^..2N....y..:..&...6......Q]..\. ..]n.q .WV.7u.;.$L..>..:.>n.....zgj.....{G..\.].d.........dl......i.+.S.........!...6..9.7\.U#.....d....?....A...>..Q..{=.1k.Xejn.i.0+^..mO..e.3.G.Ky..Fr..3....$.,.`;....\<..cE+8..U..x......3-..Jai\.\.(fF'.f..!p."C..oF3.1d.4aJ....?v...ZA...p9.`a!.~vk....T.<..r.6..0.L.%.G..../O..6.^>.....*%.B'.....a"{M$...........' ]...q]..`.j...0M..)......[.fD....MsL.\.....3...[..T\|[8SC.jM..O..\.Y..P......i!.vcn4.9.....J.j#..xe..'...fS...../4)..1C.RX..[.o\...5..rb1......y.V.B?.^R..6h...D..O.c.....elQ.....wC(...V.7..H....e.jE..k.yHX./M.&..A'...~.l\C.....";..Q.,\|..].+.T.H........#.O.i..sQ...y....d.[....'.NP......x-p.......4.....V.p...,Z.~..s-....U...Xd.6..y0.....4....K}.I.........PZ\.%..u...\d..m..eXx...j>..C.......J..m.....c..n[..6.(.9.&....U_.z.I.J.@.>z.....V.hnDO..A.bi.mT=w.)...IqI.......J....#[....

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	65595
Entropy (8bit):	7.940372148613207
Encrypted:	false
SSDEEP:	1536:+kEdpNKj515aMv8xdImQKIx/FHtMYQNJmlGpsk+:+x/Kt78UjKuHt3QNJmIpQ
MD5:	C1ED8D12F10676D96824BBCC612457BF
SHA1:	E1018B1391E0D655774B18787970EF72C40C2974
SHA-256:	AFA6CCF894F4990E578C8C3AD017150F71B94FEFE850217B0F24D9DB5D47CC4A
SHA-512:	DC5D749B0A9CDCDD5A47923D21B76AF331189E41830E58EB8C2BFD3D20415E88760D187F256249D9FE370594F09BB0169E3447B07A41DB0B0A29AF027BAB623E
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0...j............p..........,.X....'...YG!.....F0Q...@..JD. ...Fm.,.EH"..Y........U..M.....DY.YH....Ac.K....4=.....S.......w.z..!.8..^x-v........g`.. .TD{....I..^RE.P.)(/.'z.C...@.....6...b..o.j.>,N..4...8.S....../.vZ/....[-.zt?.k.....}..}....". )3...3..&o.y%..L.v* .DQ..C^..@$e.QF....k.:.........:.Qn..6...@+yM...K`x.....:......2.!.y..a........a.hx.L..)s.........J`Z......H{....!.....C(Pb...H.....XJ.. ....#?.A....I..g.....p..%:lmt...C.7).8...K>.z.N}.,.lv.`..(..4...b..>t..06......?........b-.%<.........W.w.f.........q.;..b.5..K.~..x..6.t.1zf....vA]T.g.jp....C..k.3@ ..:wO.Q]t..c;.D\|.D..S.].q...1.H.8.L....TK%.A`H.oP..E..O9Ga..Q,.OP...(2".F#.T..c..B..(,Nl......q.~.....v.bM....<..cn\|..W....k..f...N.2..%....`.8..0g.0.>!.....c..&4(.$.H.....Q2]......2.:...).r.,..E......tt8..@X...JZ.........jGm....<=H.$f.g..7.i"..)^..)e..%.HV.u#..T.80..Iq.5....7............N0..Ka.........li.#.i....[.....C...F.fo..i...[.#..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.LAa13Y-4SXU.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTutjgcOSyX6KH6kYXJp5HabmF8SGA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	4154
Entropy (8bit):	7.228124337008311
Encrypted:	false
SSDEEP:	96:6DVpiVyTPxHnOuWJTuOarqqo1vt+MJe4GnuarZltmSv9:oVpTPxuluOarq5AMJe9rNpv9
MD5:	2205EDCE15DFE4DB8B8EA5B2AC99629F
SHA1:	0019F1AB76F518333876FBA03FF21732D8FFA459
SHA-256:	08C6CB5961DA3610818F43C21D42D556B07B9B0CBC8B216E48F42F7DDF94A236
SHA-512:	8198EEAE7E71E66ECD484A2A1BAB294BF136E27F5600775ECF7E2609B4BCF904A6CD6B12A0B8BCE6774CD83A8D72F373A46A39181712AE8A3B33A47E04BD89C0
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0....j............p. ..@.....moof....mfhd............traf....tfhd....................tfdt......T0....trun.......x...$...U..............?=..............(.......'.......*%...............D......R......./........c......#.......b...............B5...............f......(V......'^...............g...............&.......`...............}......&...............,........).......................K...............t.......$..............-........ .......r..............$\...............=......Y................6......................................!.......D................................................\|..............!.......9g......./.......0.......x......9........................]......u................h.......K.......<......:_......................Nb.......................9..............................k................9...............g...............m..............>........m..............$..............."Y...... .......#.......).......$.......%.......).......B(......0..

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3817)
Category:	downloaded
Size (bytes):	122913
Entropy (8bit):	5.472136552318629
Encrypted:	false
SSDEEP:	1536:KAIcfKjLgtJUzb6xngNEw3qNmSMq601sibL/GDj50frNNyhAnY/rBl6zap+uLU2Q:PIyKbXf4M6J/GDlkap+uhK8C
MD5:	0E46F1208A65DEA2631A3BAD0A09E1FE
SHA1:	F286F70876DB7F668727057AEE401EDBA5269B7D
SHA-256:	94BF15959C201BE7CE4EE345AE3CCE61DE0F85426CFAB1FF596148C834D1C747
SHA-512:	F755466BED39220668C6E7BCE86B52870EBEF536A002654497695DBEA1492287BB42FBF02B5164ED727277063E7D3E70C07BD1936845870F96537DFB34E58011
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2904473
Entropy (8bit):	5.655426899162941
Encrypted:	false
SSDEEP:	24576:6CgjTLBZ7KPOoNOiB1mOjv9tH3Tkb3+o+kQI:SBZ7KPOoNJB4ov9tH3Tkb3+oII
MD5:	7C2D9220E66F2FA5621E3E09FABB6446
SHA1:	45890F8D6DFCF81F5D02440CFCBD6A3D74DED877
SHA-256:	FD7980C70F96AC2053A20071ED85374F304AB3205C31BE2BA1C8B42290BCF490
SHA-512:	B69CB91140C4EEC2D65EBB2EF53B3818669C2694943BCF406D8D22E846C0D5CD9F45196A0EB41506011C2189008A1471D6A758760CDF190E59C54C4A4ABE9ABE
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.OUOaImMLt-4.L.W.O/am=ABgM/d=0/rs=AO0039taSMp4Xhs94ofat1wH8oY9L7baNQ
Preview:	.Fng7d{width:100%;border-radius:50%}.TW497b{height:56px}.TW497b.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend{height:72px}.mVuend.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend .W7g1Rb-rymPhb-Gtdoyb{gap:8px}.WgAPob{margin-top:8px;margin-bottom:8px}.OiePBf-zPjgPe{display:var(--gm3-focus-ring-outward-display,none);pointer-events:none;position:absolute;z-index:1;border-start-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-start-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));inset:calc(var(--gm3-focus-ring-out

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3817)
Category:	dropped
Size (bytes):	122913
Entropy (8bit):	5.472136552318629
Encrypted:	false
SSDEEP:	1536:KAIcfKjLgtJUzb6xngNEw3qNmSMq601sibL/GDj50frNNyhAnY/rBl6zap+uLU2Q:PIyKbXf4M6J/GDlkap+uhK8C
MD5:	0E46F1208A65DEA2631A3BAD0A09E1FE
SHA1:	F286F70876DB7F668727057AEE401EDBA5269B7D
SHA-256:	94BF15959C201BE7CE4EE345AE3CCE61DE0F85426CFAB1FF596148C834D1C747
SHA-512:	F755466BED39220668C6E7BCE86B52870EBEF536A002654497695DBEA1492287BB42FBF02B5164ED727277063E7D3E70C07BD1936845870F96537DFB34E58011
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	781634
Entropy (8bit):	7.9995866086630505
Encrypted:	true
SSDEEP:	12288:Q5T+zqF6nXQ+MDuAvAZXnSTmli1ebhQ58W/GA1E2OQzg85yi2d20dnxXsO/K:nz8MAvuAvOSTmliIb6J//fs85G1dnxBK
MD5:	643CB8027A478124C970093F649C0214
SHA1:	3EBDDD270FC0372825B065DE36D0D46475870E8D
SHA-256:	731175AD164800031FDE5F3E72846AB3A979E1F81372E230B0A47AA6CBE341DB
SHA-512:	163CFB711BA1D84DE3C49290DB34E0ECD69EB0EF648424A4B352733E561E0C2C1DA3209A7F62D9E02C682DA6882B6B291353D365868EE6CD898753B319942F5C
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0...j............p../..h_.....moof....mfhd............traf....tfhd....................tfdt.......p....trun.......x...$..o........?..............al......................4...............4.......)........&......9........p......I........\......$........r.............. .......! ......,.......JZ..............:........x.......1...... $......?T.......P......IF.......i...............>.......G...............Z......"d......3O......!T.......9.......Z......'.......".......%.......#.......H.......!........W......G........W......E.......................8.......(.......FE.............................................."<...............y......I........................V.......D......(.......8.......................>...............$...............#.......t<...............d.......{.......z...............m.......H....../........d..............................I...............2........].......}......B@......0%......,.......YC..............&"......U........c......#.......,........

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	671
Entropy (8bit):	4.971238198753172
Encrypted:	false
SSDEEP:	12:UJO694211FfgsO6ZRoT6pWihKhhxkmgs6ZmOHc9n+5cMK00k14enEPCedG:G9JFfbOYssIVkmbYmOOk4TfenEPCD
MD5:	BC3F66658BF1AAC5E93DEFF528B6E90E
SHA1:	E02939B6F5A9EAA666CDFDA5E5D99F876614E666
SHA-256:	FE0994BDC329280ADE3268FE5554F3ECA4A725676CC0427C85526AC8E89342AE
SHA-512:	CD601FC0F5FC34E0377262BA7C84C062DAE7AF76DD955D6F9309224DDA18CE5013A1CA4FCD0A910F56138E8C3246A592C24322CDF59BD917FB6F1E6CC16661A7
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Material+Icons:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback */.@font-face {. font-family: 'Google Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlematerialicons/v142/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2) format('woff2');.}...google-material-icons {. font-family: 'Google Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	dropped
Size (bytes):	2099327
Entropy (8bit):	5.644527794914939
Encrypted:	false
SSDEEP:	49152:a2AvseVC8Xq+lodGmBKQJnEvD0Ydtows214:AYx
MD5:	BAB36246C42676D5E9D782E885713EFB
SHA1:	AE2BFF2D3279C05F13B19A9D3A27FDF83E8E34C4
SHA-256:	2C6011F674606E38AE32D79F41991BEA88E1A8B69921D43FB7B5BE61E32F8A21
SHA-512:	6678CCCA7BA4C24E197FB46AA2D24B0FBDF46293B57C8246523679B6EE0CAEB8A179691F6D7A1BFB185DA0062FE694606BAA7FACE1CCB2D22FBFDE5E9D8F8E09
Malicious:	false
Reputation:	low
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc1800, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	464
Entropy (8bit):	4.758217138015706
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGC8aLK:uZC4vgYZLPQ5C8a+
MD5:	BA6AB51487CFAEF8F7E56133C34AAE37
SHA1:	19DF244D1D07FF43020A7B001A5B27498507CB7D
SHA-256:	FB20FC7C1F7CFCF723EFCEE54434C316E05EE614F707502344330828FFC1CC98
SHA-512:	95EC94EE16487C430C45E98CF822425F2C7934F69CA257C5E20B1F9E659D6BBF6519E09AD65CE18DA8CA3786D477FC93286F3C6C6AAA1C08B319A4B9AAE854EA
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447". }. }. ]. }.}.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	109118
Entropy (8bit):	7.707810321077923
Encrypted:	false
SSDEEP:	3072:V45r656iVbPk+JDjxuEhegGWKbMdn9UTIm3AH:or656iVPFVNFEi6c
MD5:	CEFFEB0FBF72C774FDC30C55E334C14D
SHA1:	BCC397B993C350EB71B1877999CE6288D9C85772
SHA-256:	7609E0B40D6D680310DC89FF4F4BF6E408D3700A1F19F6A50A25C9619B8A6AFC
SHA-512:	CC55CE964923BDB35F7E58DA5C8AD8128356A8FD55FE96E0AAD0A37CD1DC358B85BC82A67A59FE3E6E2CB198A5AB3AF8A33E7B800F4ADC29D516BFD229457492
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... ......0...j...........p.....P..qqu........"......X$....../R...A...N.v4v..^.e.......n.wN.5........"&%......^....../.Y.L.....~.P._...<,._y?.i.......[.'...\%.s..\.2...beZ.W....~.p....y......@h.............U......^.$...f;M.-?.T3.I)...!"...%............./.....=l..@!k............/.Qqqqqu.U....3...(...).``..i0.......2.S...1.'..b...1/Q..E..x..BK...^..d\..\........L.K..]E../....H.@.......3..K....3.._"a.E.\\...I.^^.H./.q.A/JB.^....^...d......Qr...dMB.'.".z`-.9!4d..>b~...`U..)......yQqqq.......K..K.(.D..D........>.........@.?...X`%....Ix....D....C.$$)/..//.`]d_..I=..........)yx.....2.....I(Hx.x.x...._.H........J!yz......."...&..\\G.....K..F..................".!.E....E.\\\\\_.E..........\S....]........ SE.3.e.e..T.w.z{q.8..1f..nHl5R.\|.a.......\!..v.h.....N.v...T.@w..O...\.<\$.....p.5.......b..kK...G.v./.GE.W.Z.r....W.......TKIh..`..V.&.{....3...s..V....{.K..L3....'e\0...L*..!.W7.PD...E.................\\\\\\\\\]T\\\]...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	dropped
Size (bytes):	79129
Entropy (8bit):	5.569786447575637
Encrypted:	false
SSDEEP:	1536:TypOM8zkW/J3tYleOpJKgaoWqqVkpWpPW3hOFLSDTJ+RQTg:FwgY4uOkpsNSDTJxg
MD5:	7034A073DAB2AE29FE62EF4C7D5A3927
SHA1:	1C518006C828B0C081FFA2AE00A9A445470449B7
SHA-256:	1ED1DEDE46FD5682A33E876EB45202E4C2BACBD7510584C2540FBDB252DF65AB
SHA-512:	325067243A35C52D8286BFEA0978A2CD5A7394954A9A49504F2E7920BA7231E16A0BAC847A28F2939B5F69DE066E0E7908D899B87AC7382BB6341E51EA854420
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var a3=function(a){a.isActive()\|\|a.start()},b3=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},tDa=function(a){return g.WJ(a)\|\|a.I("web_enable_caption_language_preference_stickiness")},c3=function(a){var b={languageCode:a.languageCode,.languageName:a.languageName,displayName:g.xK(a),kind:a.kind,name:a.name,id:a.id,is_servable:a.j,is_default:a.isDefault,is_translateable:a.isTranslateable,vss_id:a.vssId};a.xtags&&(b.xtags=a.xtags);a.captionId&&(b.captionId=a.captionId);a.translationLanguage&&(b.translationLanguage=a.translationLanguage);return b},uDa=function(a,b){var c=new g.uK;.c.languageCode=a.languageCode;c.languageName=a.languageName;c.name=a.name;c.displayName=a.displayName;c.kind=a.kind;c.isDefault=!1;c.j=a.j;c.isTranslateable=a.isTranslateable;c.vssId=a.vssId;c.url=a.url;c.translationLanguage=b;a.xtags&&(c.xtags=a.xtags);a.captionId&&(c.captionId=a.captionId);return c},vDa=function(a,b){var c,d,e;.return g.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	79129
Entropy (8bit):	5.569786447575637
Encrypted:	false
SSDEEP:	1536:TypOM8zkW/J3tYleOpJKgaoWqqVkpWpPW3hOFLSDTJ+RQTg:FwgY4uOkpsNSDTJxg
MD5:	7034A073DAB2AE29FE62EF4C7D5A3927
SHA1:	1C518006C828B0C081FFA2AE00A9A445470449B7
SHA-256:	1ED1DEDE46FD5682A33E876EB45202E4C2BACBD7510584C2540FBDB252DF65AB
SHA-512:	325067243A35C52D8286BFEA0978A2CD5A7394954A9A49504F2E7920BA7231E16A0BAC847A28F2939B5F69DE066E0E7908D899B87AC7382BB6341E51EA854420
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/2f238d39/house_brand_player.vflset/en_US/captions.js
Preview:	(function(g){var window=this;'use strict';var a3=function(a){a.isActive()\|\|a.start()},b3=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},tDa=function(a){return g.WJ(a)\|\|a.I("web_enable_caption_language_preference_stickiness")},c3=function(a){var b={languageCode:a.languageCode,.languageName:a.languageName,displayName:g.xK(a),kind:a.kind,name:a.name,id:a.id,is_servable:a.j,is_default:a.isDefault,is_translateable:a.isTranslateable,vss_id:a.vssId};a.xtags&&(b.xtags=a.xtags);a.captionId&&(b.captionId=a.captionId);a.translationLanguage&&(b.translationLanguage=a.translationLanguage);return b},uDa=function(a,b){var c=new g.uK;.c.languageCode=a.languageCode;c.languageName=a.languageName;c.name=a.name;c.displayName=a.displayName;c.kind=a.kind;c.isDefault=!1;c.j=a.j;c.isTranslateable=a.isTranslateable;c.vssId=a.vssId;c.url=a.url;c.translationLanguage=b;a.xtags&&(c.xtags=a.xtags);a.captionId&&(c.captionId=a.captionId);return c},vDa=function(a,b){var c,d,e;.return g.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	6.00361617238872
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lJhwlDQVaIlzw/teBOwYKUnpkPpVtuud39FOsEjQKUt2up:6v/lhP5hwuwV/Wf9UnpYtuuMcPtVp
MD5:	EFD6EEA9FECF37E4D8C7D10DA39FBBA7
SHA1:	7F04A2E455383429FD80897393DC4E507309CF11
SHA-256:	5937758DA79FF2D2102FA7FC7F174AF46080EF14CBECF9BFC9D2E9CA50102A61
SHA-512:	89511F6F24AA3A46274AA55363D8EBA3B7678F6B328ACB6151FC40BF620ADFE671BC60C1E76355563D6C4D7ECEF3F5C0E7309F50BBE4473EF8A9379F8F4FA279
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_1_video_x16.png
Preview:	.PNG........IHDR................a...eIDATx.c.xp.@.......ue.A...o.......1.....O.....>......\.0....D.0H.!>..2.2`......h.r.-..........gF.....P.B.....IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1638
Entropy (8bit):	7.835781101417554
Encrypted:	false
SSDEEP:	24:C/6mQz6wXDnEnQ08Sq/npAU2KLEufMlHAV2+TGGa6+ljZUwgZkbXlUZFGnp:C/6B6iup2pAFkMpm2+Tq68jbgZkp9np
MD5:	CB8E139CDF890B2FE079A30C32F7A137
SHA1:	D2840BE49D276F3BFB349217007CBA1F2732DDC2
SHA-256:	08CCE022C4202EFFCFCBEBAEA07EB5DF4E18569C64B438636EE1EFA8547D56F8
SHA-512:	F910F15B68B3EC664B983226A28D15E0E3B9755A3B45C2D773A5DE1C8A5F27BC479EDE6EADBADD1971B9DAD21B81E9B1E59CDCE5965E1D4B4E4A7397F4EFD18C
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/s2/tt/images/play-overlay.png
Preview:	.PNG........IHDR...M...M............sRGB.........pHYs.................IDATx..\MH$G... ..Y.3....i.82..d1F..;fC..A! ......I..<(..!.!&H..s....A2(..!...F.1.;.L............z..<.g..^}vU....US.$TR.iT.&M..&5m.M.....g..>I.k"..=. E4.i.......#..H...@.......\|krr.....666~;<<\9==.....P(.K.R......w\..q..g.. ..V^.4E.jll.\......_%..v...5.."..F^$kPy............~.CA....Q..{...d...<<<...9_.@./...K..........$....wW..ni...E......\[[.....z\|\|\|.............F".........:\......(....HL.....?..fg....Ofgg.....p.n.~.......`'......n\|&....A.E.....o..e. .G?U.+.^..;~..w.........1....L......vS.4.....z..a.h.....~..Ca...=..V.#.........j..8...1;O........2..+.]6.8a..-}..z.m.[..2.....4S.$S.^..l.fc.v.f!.>..3.",....H.q..m.#3.U.).t.b..u\.j.4...F....q..+.C.o3.B.].gW5sG. ....b......o-N..2.f#...{{{..........E.q...2E."....F..P(\........,.a<.X...I...{A......566."..B.m....#...af...... ....E+QKQ./.7P..._%.4]...r.N.w..X.T.iP.t.k`n.D..jqkk.....w....c.E....<2.i..Y..[............T..7p,..x..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	dropped
Size (bytes):	6368
Entropy (8bit):	5.393709113390338
Encrypted:	false
SSDEEP:	96:hOw/bYdpLNJUij4Eg5gvsSPgdpjOImpY50GXKAJ+sARNfk:sMYRmEgg7PVpY50UKAglRNfk
MD5:	804991CC8CA6510988BA76D7AF841B04
SHA1:	C64C40F6DB1020CE7E79FBAB440D7EEF78AF732F
SHA-256:	40E9CC173EE98CA7E6B693A528673EC1534328C2EEC34536059F63E3F487FDDC
SHA-512:	230C307E961812B5B6A8A5692D3BF0133FFFDFC36521553E978920EFBF6DE9801B45C56396CF7CA1119D763CA28ABEBA18832D68B6468798558ADD4C8A1C99B3
Malicious:	false
Reputation:	low
Preview:	try{.A("MpJwZc");..B();.}catch(e){_DumpException(e)}.try{.A("UUJqVe");..B();.}catch(e){_DumpException(e)}.try{.Cf(iy);.}catch(e){_DumpException(e)}.try{.A("s39S4");.var Klc=function(a){if(!wva(a))throw Error("G``"+String(a));},Llc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),xTa(b,!1))},Mlc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return dh(e,":.CLIENT")});Ca(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);Gka(a)},Qlc=function(){Nlc\|\|(Nlc=!0,Olc=via,via=function(a){Olc&&.Olc(a);for(var b=0;b<a.length;b++){var c=a[b];lf(c)&&Ef(uf(c)).hSa(c)}},Plc=wia,wia=function(a){Plc&&Plc(a);for(var b=0;b<a.length;b++){var c=a[b];lf(c)&&Ef(uf(c)).iSa(c)}})},Rlc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-c

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	158
Entropy (8bit):	6.00361617238872
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lJhwlDQVaIlzw/teBOwYKUnpkPpVtuud39FOsEjQKUt2up:6v/lhP5hwuwV/Wf9UnpYtuuMcPtVp
MD5:	EFD6EEA9FECF37E4D8C7D10DA39FBBA7
SHA1:	7F04A2E455383429FD80897393DC4E507309CF11
SHA-256:	5937758DA79FF2D2102FA7FC7F174AF46080EF14CBECF9BFC9D2E9CA50102A61
SHA-512:	89511F6F24AA3A46274AA55363D8EBA3B7678F6B328ACB6151FC40BF620ADFE671BC60C1E76355563D6C4D7ECEF3F5C0E7309F50BBE4473EF8A9379F8F4FA279
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a...eIDATx.c.xp.@.......ue.A...o.......1.....O.....>......\.0....D.0H.!>..2.2`......h.r.-..........gF.....P.B.....IEND.B`.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	110814
Entropy (8bit):	5.837369853697312
Encrypted:	false
SSDEEP:	3072:Dz9w9o3/vsq1xCLqrQcS8xriAX7E1fbaRrcjS57l+QDk/J0/JOBX:Dz9McHCLqEcS8xOAX7E1f2BPg
MD5:	7F3349D0B816897DDBC68F62A04AAE37
SHA1:	E28AB5EC2468D751066783FCB11FAFD718A1B306
SHA-256:	850F98E537EEE3589455D47BB8533FA5EAC9A3C426F91D0E318D11E7C04F29DF
SHA-512:	83AC08CACFCC3D16A6E326CE83EA95D8B687C9AEDC55A6EE32477239D54EB09D1555AD42F483EC62927CECC084DEDF819CC627CF2C91E4E337D8C2C3A63BAEBD
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite56.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="3980px" viewBox="0 0 31 3980" preserveAspectRatio="none"><g transform="translate(0,960)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,432)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2152)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10.0

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2097218
Entropy (8bit):	7.999755495203166
Encrypted:	true
SSDEEP:	49152:8hr5Ix89xd1klJ36/SpLmDdB6/glx7pcqvXi0BvzqGD:c5IOLdy36+E76qx9cqvPNzqC
MD5:	F713160E5BF260C7A2723B165B73DDB1
SHA1:	6CA34264EDE5565ADB1FB1F6A0923B3915AC0A13
SHA-256:	AEFC4E778B5045006BDA46ABEC662E43AE5AAC58A80AF3325F384D322B626162
SHA-512:	50EB64C6D84410CFA9697060B3A3DBEF29EA989E4402E5AF091A4ADE336D823432A2A6A264C3307235B2727FC1B7C5CFBDE8F8A22226C36AC5798B55475FAD82
Malicious:	false
Reputation:	low
Preview:	.3....DCgR0Q6nyWw... .......0....j............p......eU.....moof....mfhd............traf....tfhd....................tfdt......T0....trun.......x...$...U..............?=..............(.......'.......*%...............D......R......./........c......#.......b...............B5...............f......(V......'^...............g...............&.......`...............}......&...............,........).......................K...............t.......$..............-........ .......r..............$\...............=......Y................6......................................!.......D................................................\|..............!.......9g......./.......0.......x......9........................]......u................h.......K.......<......:_......................Nb.......................9..............................k................9...............g...............m..............>........m..............$..............."Y...... .......#.......).......$.......%.......).......B(......

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1638
Entropy (8bit):	7.835781101417554
Encrypted:	false
SSDEEP:	24:C/6mQz6wXDnEnQ08Sq/npAU2KLEufMlHAV2+TGGa6+ljZUwgZkbXlUZFGnp:C/6B6iup2pAFkMpm2+Tq68jbgZkp9np
MD5:	CB8E139CDF890B2FE079A30C32F7A137
SHA1:	D2840BE49D276F3BFB349217007CBA1F2732DDC2
SHA-256:	08CCE022C4202EFFCFCBEBAEA07EB5DF4E18569C64B438636EE1EFA8547D56F8
SHA-512:	F910F15B68B3EC664B983226A28D15E0E3B9755A3B45C2D773A5DE1C8A5F27BC479EDE6EADBADD1971B9DAD21B81E9B1E59CDCE5965E1D4B4E4A7397F4EFD18C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...M...M............sRGB.........pHYs.................IDATx..\MH$G... ..Y.3....i.82..d1F..;fC..A! ......I..<(..!.!&H..s....A2(..!...F.1.;.L............z..<.g..^}vU....US.$TR.iT.&M..&5m.M.....g..>I.k"..=. E4.i.......#..H...@.......\|krr.....666~;<<\9==.....P(.K.R......w\..q..g.. ..V^.4E.jll.\......_%..v...5.."..F^$kPy............~.CA....Q..{...d...<<<...9_.@./...K..........$....wW..ni...E......\[[.....z\|\|\|.............F".........:\......(....HL.....?..fg....Ofgg.....p.n.~.......`'......n\|&....A.E.....o..e. .G?U.+.^..;~..w.........1....L......vS.4.....z..a.h.....~..Ca...=..V.#.........j..8...1;O........2..+.]6.8a..-}..z.m.[..2.....4S.$S.^..l.fc.v.f!.>..3.",....H.q..m.#3.U.).t.b..u\.j.4...F....q..+.C.o3.B.].gW5sG. ....b......o-N..2.f#...{{{..........E.q...2E."....F..P(\........,.a<.X...I...{A......566."..B.m....#...af...... ....E+QKQ./.7P..._%.4]...r.N.w..X.T.iP.t.k`n.D..jqkk.....w....c.E....<2.i..Y..[............T..7p,..x..

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2097218
Entropy (8bit):	7.9997652397207135
Encrypted:	true
SSDEEP:	49152:b7gpIWtMKJuL5aVpzNtQ0wQU0Potx18QJEL:vg+WtTS8pznCQUbtx189
MD5:	1FA5EA6DAF2C60AAC19ED9575104C926
SHA1:	A476DD621C12393BEFB792BA8DD86156BE1050BA
SHA-256:	D550BF5AFFBFA4B7751DCB5E17A40D8531B02FBA1417A6427F4262534ACD64C7
SHA-512:	314557CDC5378F6707A733EBB61DFF27AEC4905B1143C5D247C5EAE984682B6DD90B0E74D691831A62B75B8DDD4F550FD3214DF9F5D92216BCB15616B4CEEACB
Malicious:	false
Reputation:	low
Preview:	.3....DCgR0Q6nyWw... .......0...j............p.............moof....mfhd............traf....tfhd....................tfdt......T.....trun.......x...$..t..............................'.......([..............@B.............."U......V........x......(.......U........{......!C......).......%.......4.......+5......2.......%.......4)..............2........T......6m......!.......,,......8.......%S......0.......)Z......Bx.............."C.......8......)C.......5......8...............}........~.......P...............................................F...............b.......V.......(...............A..............."...............................$.......f......-........................^......................................................"4.......O......................8.......8........9......................................=.......f......(........\|......$F....................../].......`.......F.......y......t........................0......@.......................;+......................3.......

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	501117
Entropy (8bit):	7.968811898725883
Encrypted:	false
SSDEEP:	12288:kGGYmHr7Bo2ZNYsyl0Ri50NJ4+VaXkXnB:f+S2LY10MEvVa03B
MD5:	F3526E4970B5718F1BC8E3B47DCA7C79
SHA1:	7A62EEA8261A34BC9A3A4BA1DF37A45A3ECE34AF
SHA-256:	2852257A508FA229744CC63EC8C5B34C801B7ACAD0D5658D3EF1BE94FB94B3CB
SHA-512:	6D15282435721A3E4A872B350B5FA20543FF1256C4B5AB68C6E62837057F5C9E1531F4B988C2C670C2E41239B4DE09F4F67C61F452CEAD65AE1D070F08953A92
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0..:j............p.....=......J.8.......j.oQCM^N..:.k..U....O.f.FP.\..<-mN\|og].>P.a..-Q/.R..`.!..=...b!........I....o..\|2.l......O..>...I..].w.f.....s:....[:+;....b...^.....ZkL..E..)...GA...f....I.!v...;....`.......(...D.x".Pj..8).=..^...).../c....\.H.T'T.]..[..`......g...{..#...........w.f....l'.c..]7..E<.<9.J"[...>...y.tPg......'.b.,.1u....hWx..{....v.V.q..+q.o;.C:a.Q..n.82PVp.....}3..sS.t......,>&_...L ..O.h..T..!......".`...T..........J..\..y...s.f......A.^.....Uhb1JJ..4.&.k...&%..^.@8V..2.@.\|h][..:.eSQP.@...y.p..{e.E.....uZ....>..{l..a.%.}.o..."...B..G.n...q..DA(...v...+u.2.D...51....,t.b.L...\|Z...f.p...`R..$.M5.-.>=b..l.a(.ZKX....N...q.......M......$.BQN.B6......w.5l......"..Y.....[zU....l.Sl.*v_.P..dql..g=..J...Y.q."..}!..%...B..j...}).+Ya...k8..}..S../wRz.R}.]......,.Mc..M.t.&5..L3...S#Yjn_.h......x....L..A......F.BM%..U...&..Y.-."\|....4.zEw<.^..<..h.h...."....P...!J...u....... .VXb....+KI

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	208050
Entropy (8bit):	5.527524198805295
Encrypted:	false
SSDEEP:	3072:HA2OL7g8WMo3NeigxLnrZyLAeE/s8vSz3gTSMzdGOCKqc6qmO+9maDhDWJPUBm1Z:ROL7Po3Ys0en8vP5GOCKaAGDWJPUBm1Z
MD5:	B53067A92A1A2972E65ACBD28C1BD4B6
SHA1:	73F76C08E36B3859382534FFD9F098A5A2AC8844
SHA-256:	ECC876C51AF40D46138AFC49ED08FB18ECB4BB8550F6587E8DF0C3E71FA67448
SHA-512:	CDBC28FA4A0A1FAC371C54B05614AFA8B6839FEF405AEB78880E8EF2D0106A28B4E59FB7BA1A7DCA99ABE1EA6EB52FED74B3AE6B61114EB757E972B5B96FE934
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.zh=(window.gapi\|\|{}).load;._.Lo=_.kf(_.vf,"rw",_.lf());.var Mo=function(a,b){(a=_.Lo[a])&&a.state<b&&(a.state=b)};var No=function(a){a=(a=_.Lo[a])?a.oid:void 0;if(a){var b=_.gf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Lo[a];No(a)}};_.Oo=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Po=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Qo=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Mo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.vf.oa){var k=d.id;if(k){f=(f=_.Lo[k])?f.state:void 0;if(f===1\|\|f===4)break a;No(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1422621
Entropy (8bit):	7.999767233085222
Encrypted:	true
SSDEEP:	24576:TBgX6LkbXi9uUwk8CS7tjwHKOlH86qfqQ5pMUk6s/ajD/2VWegANdvlKTtDUre3m:TBgX6obOuUPKoKOOfqQ5pMUOYDuEegPa
MD5:	9E765EFF8FCB035E26C86C5C8154C65C
SHA1:	5B6C4C130E4104FC4AD27ACEC7018D398FFDF347
SHA-256:	C2746E264D6CE7E67556C175FB3E2433C09986CA661AA0949C48C8F0F9690452
SHA-512:	F0F18F9892FE0FA83B2A256E479F0769A3EDF1A210147E4EC2A729B86DE83E108DC88BF12CED50486BC55E45636290AE4D1F583B807D3E78CB354F1324B6A38D
Malicious:	false
Reputation:	low
Preview:	.2....DCgR0Q6nyWw... .......0....j............p..V..dU.BI.G...\......]Nw~..bQ...C..g..?/....)t......_.l....<...~R...-.)vr....^.#....Nk0b...=..@C.0t_Ur[}..&.....M..J.mc.6LILO.. ..z...1n{9...&z.."..G=.r.n.B.y.F.Y~P..K.:L.....u%......<J...I..e.....c.X...`'..n....A.{...K.i...........]!..Lk...R..n..(..B..N.....(e..CZ....\|#...s:.\|......$. .I...6#4..q.W\|..Z..OTJCl...~..h...E.6y'=)..qH&........B...tD.+.......P..Q....0.H....Y..@....\|..!G...%..o......#...$.....'.+.%X....3j.C..u.f..-.r...wC)...;..W..f.s.M.T...@h..:\bio...D.[G+.[.u...f..eF.!.J.P.@.z...+.ClSf.......Z..O.....-..f..=3.......p@gq.V.x.f..t...J...WC.\|.7.cxu}..}...}.......8-..h...._...6.)..7..d..s3m..h....nL....R.L2.w.C......>..qh.............J.X=..,.faZ...\..&.Efl.P.U-X...,e..M..[..DoDo.......~..B(!..S0..G.RT...v........J8.m.X.P....e.]..=.. p5...:....*:.d....C...o..jz~\|.J.,.Y..''.\|..".'.x1....i.r...)C.@.R..m3}..r...`N..]WdC.....:........S.h..t.v...bGz...[.X}.#...6.`:.....I..L....m..0.....).6.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=j88ld8fcxr1s
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	127053
Entropy (8bit):	7.977618211635464
Encrypted:	false
SSDEEP:	3072:+pFcRR2Ccccjev0rj7tWcqMb1Sg1yWWXQycaMnF3yBvYK:zWtccSy1WcqMYKBw+xnFGb
MD5:	DB335794393E0CEEF9B9473D331F2783
SHA1:	C90168BE21AEF7842BA8F593083FBA0177DBA0D9
SHA-256:	F247CD0B972453E22CDD970E85BFB9950CB05A1535A3927F7694017EA21339FB
SHA-512:	62371D193C824612C6E4539759411FB27391111B03F52A902B838B0DF8793377D5D6CC6974ACC0DDE6D05AD9BD286C7BCA7406EE2ECEFFB6C1677BC01E28C118
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0...j............p............o..!..E.V.ow.F.S..6B.d..@zf.....:......\|U..U..L..lzw..H..Q.}/Z`FW[sG.N....c....4...U9.Z.x.ehD9N4.%.rF(.........u...O......`'.Lr..B^7y.M...V....,R..Ae.2.Q..D).(..........p.D)g.v>. ......P1...G_[.nd+...v.!.....0T...9.N>..4..d..Ow....y..xK...........!......+0....p.!.......7jbA.l.C.......]X.b...QC....2.n.....U2...\.......&R....=.}.f"1.(....P.B.......5Mvk...-.......R8).(.1..B..0Uyf.RL.dW+..,)<.-.lh.....w.../...D.. s..C9X......:L.=.&..=.....TMiW.x.X..2...m..>%.XI.N.4Y..M...<@E...abVgq...\(!.v..W.&T.Y...f...(..Xt.Y..@....X..f.?..!`...z.7..e.0..g Sj....P..rq(.D...4^...J(0Y...:......).......H.q....{y....S".FcS.!.....C.. .aE.K@.."... ...B.2^.0.s....i...#].?V..V..l.h.....u_..$...N.........[..........4.+VF;j.{L.c.S.P...M.j.o.....T_...\|..7.l.1.,s...[.......o!@.Zh..:vj....D...D...9&.T...s".......nB"h.h..<.5...,.w..?.p.......Jh.h.....E.Z.+.o#@...).....('.NR <L.K..H...x..=...o....(..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x288, components 3
Category:	dropped
Size (bytes):	2008
Entropy (8bit):	0.8151360693602315
Encrypted:	false
SSDEEP:	6:tJn/FnnbgZzMnnsMntDOImMqR3xl/l9msK8:tp/dbgZ4nnsMtDObTxl/TM8
MD5:	22335FE58C035B960E784A20F0EC27AA
SHA1:	7A7786C88A2419D2F296F9E702B53C0FC7D1E729
SHA-256:	9B4347C2B891A2C55262E1ECCC1D9351AC268B3FDD649D29D8009B7D97361238
SHA-512:	6AE11FEDC02075089B0AF764C6E054C3C7EB1952B742DE7BBE26CFDE5E908203DA686E665A7B51B3EFEBB6A01F4AC44EF5E46B9100D802F5CC84466055EC5779
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................................................................................................................... .................................................................................................................?..@..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3778
Entropy (8bit):	5.108997768922645
Encrypted:	false
SSDEEP:	24:D/lGBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBI:D/3
MD5:	EA2E0DBEB61DC89E37C4F3BCA15CBB48
SHA1:	BDAB688170BE30E124095E5FA36CAD6F7FAA87FD
SHA-256:	488BF9491A025004CA5EC645A4813A41E37DBC135A7108E93414800D11178E9B
SHA-512:	89AD55DED9883E2B33B1A2203A6001CD2CA19E915E01AAB8A31E2201461A550BBEE554D38900A164025A096F9A06889C74EC956E1038819095F131C970C53F94
Malicious:	false
Reputation:	low
URL:	https://drive.google.com/drive-viewer/AKGpihbsYuRPXht5N3qTymeAiJ0CP1I58g8-Tyx5BFqtshSJE0_PVZ-tk7G6s_SraY6NWh4CqJLgs5B2Ag8zlojzedRc816LtsYMfXQ=w1920-h1080-k-rw-v1-pd
Preview:	RIFF....WEBPVP8 .........*..8.>.@.K.#........in.wa.@...]....{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.NC.l....9.}.r..d.=...{...'!.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	484827
Entropy (8bit):	7.968078304954325
Encrypted:	false
SSDEEP:	12288:OIsmuHTAnVV8InvWEqNBuOL/n+/VrntkKEhRTgfMsDYJC:OIDCTWVV8In0XqFwTgb+C
MD5:	6C61B5D4C8D9D305F4B03632C86EFF9C
SHA1:	854CFAA40011399399132D5D2186DCCDE771ED1B
SHA-256:	875AEA66326FD6D7E6C32BE4FF6E842191A307C82B1C8F40C5177ED7916C1B2A
SHA-512:	45130A906D436C13550F7E1519AC9353100603104795FD14337106266B010576CE685A64D2E3BA0D4049D35DF3B5E4936CF130287FF6549052A7BE2F98F4B450
Malicious:	false
Reputation:	low
Preview:	.1....DCgR0Q6nyWw... .......0..Xj............p.....-;.....moof....mfhd............traf....tfhd...*....................tfdt.....<x.....trun........... ...k...i...~...\|...}...\...........Z...M...U...j.......S...h...r...f...r...h...}...[...c...q...}...`.......n...e...................G...d...f...K...............b...i...f...j...p.......]...[..._...[.......A...c...s...n...u...f...........V...]...^...^.......U..._...g...d...e...........W...V...e..._...k...i...k...t...i...d...........N...G...U..._...\...........k...a...b...a...d...........\...`..._...i...X...i...g...l...u...s.......b...R...T...X.......a...a...i...i...v.......S...~...[...`...i...g.......}...o...y...a...n...........V...c...`.......Q...Y...k...a...`...n...{...t.......\...W...m...i...k.......X.......S...U...........:...R...]...^...Z.......R...V...`..._...l...t.......M...X...^...`...l...k...o...s...p...q...p.......L...]...^...h...n.......d...i...e...p...g...z.......Q...f...f...g...o...s...p...n...n...}...........`...Q...]...b...h

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	dropped
Size (bytes):	82296
Entropy (8bit):	5.592663724925133
Encrypted:	false
SSDEEP:	1536:brcg844kyv9f9wzJz6uKBLpLON1B5q0VOrGzIF7:AkyvFpLOHqmO2E7
MD5:	E08FA1D1755C4F8570B123C010325195
SHA1:	C496DDD8CBC293564E5FDF2D987833332F554660
SHA-256:	73C96E90B9C6A8E44AA7FA57F5A84A765AB2D1452E11B7B41882F2056B4BC393
SHA-512:	369B54AB94A768D44216962936D3DD948EAA688488D9C279FFCEEC2A2CBD4243FEFB2EADABB6C9D53243C3803EFBB5DC7E234CFC17EC5A9CA549AD4DE4141700
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 14, 2024 06:53:04.685465097 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 14, 2024 06:53:11.326734066 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:11.326772928 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:11.326827049 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:11.327487946 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:11.327501059 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.159034014 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.159207106 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.163259029 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.163268089 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.163717985 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.165462017 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.165486097 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.165493011 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.165605068 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.211405039 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.284080029 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.284111977 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.284177065 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.284224987 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.284315109 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.284475088 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.284475088 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.284569979 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.284581900 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.284621954 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.341186047 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.341506004 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.341932058 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.342282057 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.342298985 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:12.342308044 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:12.924583912 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.924855947 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.924882889 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.926086903 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.926148891 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.930202961 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.930269957 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.930404902 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.930413961 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.932420015 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.932642937 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.932704926 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.936443090 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.936526060 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.936872959 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.937048912 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.983900070 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:12.983920097 CEST	443	49716	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:12.984055996 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:13.031790972 CEST	49716	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:13.262284040 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:13.262482882 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:13.262582064 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:13.285897017 CEST	49717	443	192.168.2.6	1.179.112.196
Oct 14, 2024 06:53:13.285924911 CEST	443	49717	1.179.112.196	192.168.2.6
Oct 14, 2024 06:53:13.355057955 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.355120897 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.355179071 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.355403900 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.355418921 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.829965115 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.830250978 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.830266953 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.831908941 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.831975937 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.833091974 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.833174944 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.833323002 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.833331108 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.874243975 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.969765902 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.969926119 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.970026016 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.970047951 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.970232010 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:13.970288992 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.970858097 CEST	49720	443	192.168.2.6	104.18.39.141
Oct 14, 2024 06:53:13.970866919 CEST	443	49720	104.18.39.141	192.168.2.6
Oct 14, 2024 06:53:14.021883011 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.021909952 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.021992922 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.022721052 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.022733927 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.276112080 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:14.276148081 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:14.276213884 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:14.276437044 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:14.276456118 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:14.297821999 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 14, 2024 06:53:14.519246101 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.519516945 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.519531012 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.520942926 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.521023035 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.522010088 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.522084951 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.522167921 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.522175074 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.567712069 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.711503029 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.711581945 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.711632013 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.712156057 CEST	49721	443	192.168.2.6	172.64.150.216
Oct 14, 2024 06:53:14.712166071 CEST	443	49721	172.64.150.216	192.168.2.6
Oct 14, 2024 06:53:14.716917992 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:14.716959000 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:14.717031002 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:14.717603922 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:14.717622042 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:14.980382919 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:14.980809927 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:14.980844975 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:14.981812954 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:14.981875896 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:14.982867956 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:14.982932091 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:15.031764984 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:15.031775951 CEST	443	49724	172.217.18.4	192.168.2.6
Oct 14, 2024 06:53:15.077383041 CEST	49724	443	192.168.2.6	172.217.18.4
Oct 14, 2024 06:53:15.233002901 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:15.233031034 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:15.233087063 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:15.234631062 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:15.234648943 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:15.379316092 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.379412889 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.381881952 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.381891012 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.382271051 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.390328884 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.431478024 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.490641117 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.490665913 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.490684986 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.490766048 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.490782022 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.490819931 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.490839005 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.580058098 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.580108881 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.580209970 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.580223083 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.580261946 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.580280066 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.583899021 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.583916903 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.584002018 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.584012032 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.584064007 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.666384935 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.666429996 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.666498899 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.666511059 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.666548967 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.666565895 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.667728901 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.667772055 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.667807102 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.667814970 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.667833090 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.667857885 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.669142962 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.669188023 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.669219017 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.669225931 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.669253111 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.669272900 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.670311928 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.670350075 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.670377016 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.670383930 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.670403957 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.670422077 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.755108118 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.755153894 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.755197048 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.755209923 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.755263090 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.755861998 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.755902052 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.755939007 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.755948067 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.755971909 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.755996943 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.756383896 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.756426096 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.756472111 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.756479979 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.756509066 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.756534100 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.757383108 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.757422924 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.757461071 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.757468939 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.757508993 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.757518053 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.758311987 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.758357048 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.758394003 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.758400917 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.758431911 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.758443117 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759099960 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759141922 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759179115 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759186029 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759215117 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759253979 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759325981 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759397030 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759403944 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759452105 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759506941 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759514093 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759536028 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759552002 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759557962 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:15.759567022 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.759578943 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:15.939373970 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:15.939587116 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:15.974725008 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:15.974746943 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:15.975158930 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.016341925 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.043246031 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 14, 2024 06:53:16.043345928 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 14, 2024 06:53:16.273704052 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.273725986 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.273785114 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275407076 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275435925 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.275491953 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275532007 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275542021 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.275548935 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275589943 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.275688887 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275979996 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.275996923 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.276215076 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276225090 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.276302099 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276452065 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276452065 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276459932 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.276468992 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.276515007 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276582956 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276591063 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.276628971 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.276637077 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.317605972 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.363394022 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.531317949 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.531508923 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.531534910 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.531554937 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.531567097 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.531567097 CEST	49727	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.531573057 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.531579971 CEST	443	49727	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.568917990 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.568948030 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.569040060 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.569421053 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:16.569438934 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:16.815249920 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:16.815278053 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:16.815335989 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:16.815536022 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:16.815542936 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:16.932389021 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.933104992 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.933140039 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.933983088 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.933988094 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.934140921 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.934729099 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.934756994 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.935323000 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.935328007 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.935934067 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.936439037 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.936453104 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.937263012 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.937267065 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.969372034 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.969796896 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.969819069 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.970329046 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.970335007 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.979782104 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.980266094 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.980303049 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:16.981467009 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:16.981475115 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.032881975 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.032938957 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033006907 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.033039093 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033068895 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033113003 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.033113003 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.033309937 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.033309937 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.033340931 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033369064 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033881903 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033905983 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.033972979 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.033983946 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.034038067 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.034154892 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.034173012 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.034182072 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.034185886 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036063910 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036107063 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036154985 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036164045 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036180019 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036228895 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036278963 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036293030 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036425114 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036439896 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036830902 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036884069 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036942959 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.036952019 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.036997080 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.037024021 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.037062883 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.037070990 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.037082911 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.037087917 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.037101030 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.037105083 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.038985014 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.039067030 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.039149046 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.039282084 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.039315939 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.077713966 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.077856064 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.077923059 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.078104973 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.078120947 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.078130960 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.078136921 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.080600023 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.080652952 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.080737114 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.080899000 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.080925941 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.081314087 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.081520081 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.081659079 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.081684113 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.081698895 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.081707954 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.081712961 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.083820105 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.083862066 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.083925009 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.084053993 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.084080935 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.281958103 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.282031059 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:17.283281088 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:17.283293962 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.283677101 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.286514044 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:17.327435017 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.548927069 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.549134970 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.549144030 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.550360918 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.550426960 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.552907944 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.552967072 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.553277016 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.553453922 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.553545952 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.553553104 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.606013060 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.612502098 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.612641096 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.612705946 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:17.613418102 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:17.613418102 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 14, 2024 06:53:17.613439083 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.613451958 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 14, 2024 06:53:17.691714048 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.692197084 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.692282915 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.692632914 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.692647934 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.696446896 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.697047949 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.697084904 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.697451115 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.697457075 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.697638988 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.698028088 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.698046923 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.698473930 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.698479891 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.733371973 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.733772039 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.733822107 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.734164953 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.734178066 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.735723019 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.736022949 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.736052036 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.736485958 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.736495972 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.792121887 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.792267084 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.792395115 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.792459965 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.792459965 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.792496920 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.792521954 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.795178890 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.795217991 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.795284986 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.795413971 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.795432091 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.799201965 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.799268007 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.799391031 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.799418926 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.799437046 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.799448013 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.799454927 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.800790071 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.801031113 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.801152945 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.801539898 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.801539898 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.801553011 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.801562071 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.801965952 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.801990032 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.802050114 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.802346945 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.802361012 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.803500891 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.803529024 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.803591967 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.803692102 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.803708076 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.835304022 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.835464954 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.835585117 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.835625887 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.835625887 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.835648060 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.835669994 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.837131023 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.837191105 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.837263107 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.837440014 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.837440014 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.837470055 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.837496042 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.837625980 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.837650061 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.837714911 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.837825060 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.837840080 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.839514971 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.839538097 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.839608908 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.839735031 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:17.839744091 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:17.977041006 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.977179050 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.977459908 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:17.977525949 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.978140116 CEST	49737	443	192.168.2.6	142.250.184.238
Oct 14, 2024 06:53:17.978153944 CEST	443	49737	142.250.184.238	192.168.2.6
Oct 14, 2024 06:53:18.628812075 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.633722067 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.633915901 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.633955002 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.634068012 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.671456099 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.678069115 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.678071976 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.679291010 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.679292917 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.750575066 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.750587940 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.751085043 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.751090050 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.751633883 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.751646996 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.752124071 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.752129078 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.752393961 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.752409935 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.752788067 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.752794981 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.753266096 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.753271103 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.753747940 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.753752947 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.754049063 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.754057884 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.754445076 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.754447937 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.849778891 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.849935055 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.850007057 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.850033045 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.850049973 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.850060940 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.850070000 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.851572990 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.851598978 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.851713896 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.851753950 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.851764917 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.851794958 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852148056 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852153063 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852173090 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852174044 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852179050 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852181911 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852194071 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852199078 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852448940 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852504969 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852554083 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852876902 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852897882 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.852911949 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.852917910 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.854430914 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.854449034 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.854533911 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.854543924 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.854568005 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.854881048 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.854892015 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.854912043 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.855046988 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.855060101 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.856297016 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.856352091 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.856425047 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.856549025 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.856637955 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.856662035 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.856690884 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.856719017 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.856806040 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.856834888 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.858522892 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.858608961 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.858669996 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.858804941 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.858823061 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.858834982 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.858839989 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.860698938 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.860721111 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:18.860806942 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.860929012 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:18.860959053 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.254998922 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:19.255072117 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:19.255173922 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:19.255781889 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:19.255817890 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:19.508790016 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.509265900 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.509282112 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.509362936 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.509768963 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.509773016 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.509984970 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.510024071 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.510600090 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.510607004 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.520302057 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.520684958 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.520719051 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.521203041 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.521209955 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.550314903 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.550748110 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.550770044 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.551284075 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.551289082 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.559695005 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.560235023 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.560254097 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.560736895 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.560741901 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.608978987 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.609127998 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.609186888 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.610254049 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.610265970 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.610275984 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.610280037 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.611462116 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.611603975 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.611668110 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.612283945 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.612302065 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.612312078 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.612318993 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.614325047 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.614347935 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.614418030 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.615799904 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.615854025 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.615928888 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.615966082 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.615978003 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.616080046 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.616106987 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.623136997 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.623202085 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.623265982 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.630650043 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.630650043 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.630666018 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.630676031 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.633554935 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.633606911 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.633698940 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.633965969 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.633996964 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.656295061 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.656440020 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.656517029 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.657546043 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.657587051 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.660178900 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.660187960 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.660252094 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.660355091 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.660365105 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.666008949 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.666163921 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.666229963 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.666280031 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.666299105 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.666322947 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.666336060 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.675072908 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.675080061 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:19.675147057 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.675354958 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:19.675367117 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.050556898 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.050730944 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.097045898 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.097131968 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.097493887 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.100132942 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.100233078 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.100245953 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.100523949 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.143445969 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.277622938 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.277720928 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.277791023 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.278172016 CEST	49755	443	192.168.2.6	40.115.3.253
Oct 14, 2024 06:53:20.278202057 CEST	443	49755	40.115.3.253	192.168.2.6
Oct 14, 2024 06:53:20.281368971 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.283679962 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.313688993 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.316189051 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:20.316235065 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:20.316289902 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:20.316644907 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:20.316667080 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:20.324625015 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.324764013 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.340920925 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.344012022 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.355073929 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.388017893 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.388111115 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.412977934 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.413005114 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.413883924 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.413892031 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.414354086 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.414381027 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.414947987 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.414958954 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.415416956 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.415426970 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.415448904 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.415452957 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.416286945 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.416292906 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.417093992 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.417099953 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.421313047 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.421340942 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.422226906 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.422240019 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.512531042 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.512626886 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.512685061 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.513010979 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.513082027 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.513125896 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.514377117 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.514401913 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.515157938 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.515229940 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.515274048 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.516654015 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.516673088 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.516685963 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.516693115 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.517997026 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.518069983 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.518114090 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.518963099 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.518968105 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.520360947 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.520366907 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.526762009 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.526905060 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.526962042 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.528043032 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.528069019 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.528181076 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.530591011 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.530605078 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.530654907 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.531158924 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.531160116 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.531178951 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.531203032 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.535244942 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.535257101 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.536648989 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.536669970 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.536731005 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.536942959 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.536962986 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.537138939 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.537152052 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.539424896 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.539443970 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.539501905 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.539654016 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.539664984 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.541981936 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.542006969 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.542057037 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.546452045 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:20.546471119 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:20.959490061 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.000174046 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.003768921 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.003778934 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.004398108 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.004492044 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.005417109 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.005470037 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.190803051 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.191350937 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.191364050 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.191942930 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.191946983 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.205774069 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.207145929 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.207165956 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.207793951 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.207798958 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.214929104 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.217644930 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.217664003 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.218409061 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.218416929 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.222955942 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.223274946 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.223289967 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.223628044 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.223630905 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.239008904 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.239342928 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.239351988 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.239772081 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.239775896 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.299487114 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.299643993 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.299678087 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.299715042 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.299730062 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.309458017 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.309509993 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.309580088 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.316749096 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.316755056 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.320621014 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.320671082 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.320873976 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.322864056 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.322870016 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.322902918 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.322909117 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.323106050 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.323170900 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.323534966 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.328466892 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.328528881 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.328581095 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.331566095 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.331574917 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.331585884 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.331590891 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.332751036 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.332757950 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.334383011 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.334429026 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.334635973 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.334836006 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.334846020 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.334990978 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.337097883 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.337188959 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.337371111 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.337563992 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.337580919 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.337938070 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.337950945 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.338947058 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.338984013 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.340760946 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.341181040 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.341213942 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.341283083 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.341425896 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.341439962 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.344796896 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.344865084 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.345103979 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.363239050 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.363244057 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.368311882 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.368355036 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.368551970 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.368654013 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:21.368670940 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:21.603621006 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.603775024 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.603825092 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.653925896 CEST	49763	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.653965950 CEST	443	49763	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.666788101 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.666832924 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.666896105 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.667443037 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.667469978 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.761321068 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.761362076 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.761493921 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.766164064 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:21.766180038 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:21.986705065 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.011858940 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.013603926 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.019445896 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.019522905 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.020163059 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.020170927 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.020916939 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.020935059 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.021734953 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.021739960 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.022243023 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.022255898 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.023001909 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.023006916 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.030194998 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.031349897 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.031388044 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.031863928 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.031869888 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.043915987 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.047665119 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.047684908 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.048502922 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.048508883 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.122739077 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.122805119 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.122951031 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.124119997 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.124165058 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.124208927 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.133547068 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.133625031 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.133790970 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.137228012 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.137300968 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.137348890 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.150238037 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.150331974 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.150376081 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.165704012 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.165724993 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.165736914 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.165744066 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.169163942 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.169188023 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.171377897 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.171402931 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.171418905 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.171427965 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.172730923 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.172736883 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.173979044 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.174001932 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.195555925 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.195574999 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.195712090 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.196444988 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.196459055 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.203614950 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.203651905 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.203707933 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.203953028 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.203968048 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.207096100 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.207123995 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.207182884 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.208379030 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.208410978 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.208483934 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.210887909 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.210901022 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.216562033 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.216578007 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.217844963 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.217853069 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.217910051 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.218240976 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:22.218255043 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:22.315792084 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.339977980 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.339988947 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.340559959 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.341444969 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.341618061 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.342158079 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.342297077 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.342327118 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.387164116 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:22.387212038 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:22.387291908 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:22.387489080 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:22.387501001 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:22.402997017 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.403162003 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.403170109 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.403491020 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.403780937 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.403836012 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.403906107 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.403933048 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.403939009 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.596889973 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.597224951 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.597230911 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.597282887 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.597377062 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.597477913 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.597840071 CEST	49783	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.597856998 CEST	443	49783	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.598138094 CEST	49787	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.598153114 CEST	443	49787	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.648293018 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.648325920 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.648385048 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.648447037 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.648473978 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.648540020 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.648713112 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.648727894 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:22.648828030 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:22.648840904 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.106264114 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.107007980 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.107023954 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.107372999 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.107693911 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.107698917 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.107773066 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.107999086 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.108011961 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.108297110 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.108319044 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.108611107 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.108659029 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.109005928 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.109011889 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.109623909 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.109664917 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.110650063 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.110742092 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.110842943 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.110852003 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.112606049 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.112883091 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.112888098 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.114403963 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.114418983 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.114931107 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.114936113 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.115047932 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.115061998 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.116022110 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.116029024 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.116683960 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.116714954 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.117855072 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.117861986 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.157932997 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.209147930 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.209217072 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.209285021 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.210700989 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.211107969 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.214452982 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.214495897 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.214589119 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.214745998 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.214768887 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.214822054 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.214970112 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.219583988 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.219721079 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.220050097 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.243953943 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.243953943 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.243978024 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.243989944 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.243993998 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.244004965 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.249069929 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.249069929 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.249080896 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.249088049 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.249274015 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.249274015 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.249291897 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.249304056 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.251027107 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.251027107 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.251033068 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.251041889 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.254502058 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.254538059 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.254560947 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.254585028 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.254652977 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.254689932 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.255455017 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.255470991 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.255594015 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.255594015 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.255606890 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.255626917 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.255867004 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.256092072 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.256104946 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.256759882 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.256772041 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.257569075 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.257615089 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.257636070 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.257678032 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.257687092 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.257724047 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.257883072 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 14, 2024 06:53:23.257910967 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 14, 2024 06:53:23.294172049 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.297754049 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.348032951 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.348035097 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.368776083 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.368797064 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.368932009 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.368938923 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.372589111 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.372668028 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.372836113 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.372874022 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.372904062 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.392030001 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.392074108 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.392143965 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.392168999 CEST	443	49795	142.250.186.46	192.168.2.6
Oct 14, 2024 06:53:23.411211014 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.411355019 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.411365986 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.411458969 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.412939072 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.412939072 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.412966013 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.413196087 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.438273907 CEST	49795	443	192.168.2.6	142.250.186.46
Oct 14, 2024 06:53:23.451808929 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.451822042 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.466967106 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.466996908 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.498702049 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.512634039 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.663232088 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663372040 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663494110 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663590908 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663609028 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.663645983 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663671017 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.663724899 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663801908 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.663809061 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663875103 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663924932 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.663933992 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.663960934 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.664122105 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.664128065 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.668773890 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.668869019 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.668889046 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.679198027 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.679258108 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.679296970 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.679326057 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.679336071 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.679369926 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.682292938 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.682301044 CEST	443	49797	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.682722092 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.682796001 CEST	49797	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.682796955 CEST	49796	443	192.168.2.6	216.58.206.78
Oct 14, 2024 06:53:23.682809114 CEST	443	49796	216.58.206.78	192.168.2.6
Oct 14, 2024 06:53:23.684194088 CEST	443	49796	216.58.206.78	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 14, 2024 06:53:12.270112991 CEST	192.168.2.6	1.1.1.1	0xdbd6	Standard query (0)	7t8ql.r.ag.d.sendibm3.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:12.272466898 CEST	192.168.2.6	1.1.1.1	0x66bf	Standard query (0)	7t8ql.r.ag.d.sendibm3.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:13.347446918 CEST	192.168.2.6	1.1.1.1	0x4fbd	Standard query (0)	sibautomation.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:13.347615004 CEST	192.168.2.6	1.1.1.1	0xb89	Standard query (0)	sibautomation.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:14.008517981 CEST	192.168.2.6	1.1.1.1	0xd5b	Standard query (0)	in-automate.brevo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:14.008596897 CEST	192.168.2.6	1.1.1.1	0x15ad	Standard query (0)	in-automate.brevo.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:14.022120953 CEST	192.168.2.6	1.1.1.1	0x4b2a	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:14.022248983 CEST	192.168.2.6	1.1.1.1	0x3222	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:14.268449068 CEST	192.168.2.6	1.1.1.1	0xdc2b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:14.268690109 CEST	192.168.2.6	1.1.1.1	0x8101	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:16.806806087 CEST	192.168.2.6	1.1.1.1	0xb2dd	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:16.806973934 CEST	192.168.2.6	1.1.1.1	0xc20f	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:20.268821955 CEST	192.168.2.6	1.1.1.1	0x2ad3	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:20.269084930 CEST	192.168.2.6	1.1.1.1	0x5be5	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:22.379074097 CEST	192.168.2.6	1.1.1.1	0x9994	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:22.379791975 CEST	192.168.2.6	1.1.1.1	0xefae	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:22.640732050 CEST	192.168.2.6	1.1.1.1	0xcfd7	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:22.640981913 CEST	192.168.2.6	1.1.1.1	0xd53b	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:24.028609991 CEST	192.168.2.6	1.1.1.1	0x5dff	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:24.028610945 CEST	192.168.2.6	1.1.1.1	0xd66b	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:25.220092058 CEST	192.168.2.6	1.1.1.1	0x37a9	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:25.220092058 CEST	192.168.2.6	1.1.1.1	0xd172	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:25.525552034 CEST	192.168.2.6	1.1.1.1	0x748d	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:25.525768995 CEST	192.168.2.6	1.1.1.1	0x5085	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:26.614696026 CEST	192.168.2.6	1.1.1.1	0xa9ab	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.614886999 CEST	192.168.2.6	1.1.1.1	0x7447	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:26.651720047 CEST	192.168.2.6	1.1.1.1	0x2094	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.651895046 CEST	192.168.2.6	1.1.1.1	0x98b8	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:26.708113909 CEST	192.168.2.6	1.1.1.1	0xb731	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.708317041 CEST	192.168.2.6	1.1.1.1	0x13cf	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:28.442591906 CEST	192.168.2.6	1.1.1.1	0xe74a	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:28.442770958 CEST	192.168.2.6	1.1.1.1	0x80d8	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:29.266844988 CEST	192.168.2.6	1.1.1.1	0x5afa	Standard query (0)	video.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:29.266999960 CEST	192.168.2.6	1.1.1.1	0x467f	Standard query (0)	video.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:29.275543928 CEST	192.168.2.6	1.1.1.1	0xbe09	Standard query (0)	rr4---sn-ab5l6nk6.c.drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:29.275695086 CEST	192.168.2.6	1.1.1.1	0xedaf	Standard query (0)	rr4---sn-ab5l6nk6.c.drive.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:30.008280039 CEST	192.168.2.6	1.1.1.1	0xd0e8	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:30.008280039 CEST	192.168.2.6	1.1.1.1	0x7e7	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:30.347214937 CEST	192.168.2.6	1.1.1.1	0x8dd7	Standard query (0)	rr4---sn-ab5l6nk6.c.drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:30.347409010 CEST	192.168.2.6	1.1.1.1	0x71e4	Standard query (0)	rr4---sn-ab5l6nk6.c.drive.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:30.420439005 CEST	192.168.2.6	1.1.1.1	0x5697	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:30.420464039 CEST	192.168.2.6	1.1.1.1	0xde7a	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:31.567106962 CEST	192.168.2.6	1.1.1.1	0x9912	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:31.567333937 CEST	192.168.2.6	1.1.1.1	0x2f3e	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:47.017755985 CEST	192.168.2.6	1.1.1.1	0xdf77	Standard query (0)	rr2---sn-p5qs7n6d.c.drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:47.017891884 CEST	192.168.2.6	1.1.1.1	0xe89a	Standard query (0)	rr2---sn-p5qs7n6d.c.drive.google.com	65	IN (0x0001)	false
Oct 14, 2024 06:53:48.093859911 CEST	192.168.2.6	1.1.1.1	0x61e1	Standard query (0)	rr2---sn-p5qs7n6d.c.drive.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:48.093997955 CEST	192.168.2.6	1.1.1.1	0x3e6f	Standard query (0)	rr2---sn-p5qs7n6d.c.drive.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 14, 2024 06:53:12.282476902 CEST	1.1.1.1	192.168.2.6	0xdbd6	No error (0)	7t8ql.r.ag.d.sendibm3.com	r.mailin.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:12.282476902 CEST	1.1.1.1	192.168.2.6	0xdbd6	No error (0)	r.mailin.fr	r1.mailin.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:12.282476902 CEST	1.1.1.1	192.168.2.6	0xdbd6	No error (0)	r1.mailin.fr		1.179.112.196	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:12.282476902 CEST	1.1.1.1	192.168.2.6	0xdbd6	No error (0)	r1.mailin.fr		1.179.112.195	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:12.282476902 CEST	1.1.1.1	192.168.2.6	0xdbd6	No error (0)	r1.mailin.fr		1.179.112.197	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:12.283049107 CEST	1.1.1.1	192.168.2.6	0x66bf	No error (0)	7t8ql.r.ag.d.sendibm3.com	r.mailin.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:13.354011059 CEST	1.1.1.1	192.168.2.6	0x4fbd	No error (0)	sibautomation.com		104.18.39.141	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:13.354011059 CEST	1.1.1.1	192.168.2.6	0x4fbd	No error (0)	sibautomation.com		172.64.148.115	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:13.354680061 CEST	1.1.1.1	192.168.2.6	0xb89	No error (0)	sibautomation.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:14.015527964 CEST	1.1.1.1	192.168.2.6	0x15ad	No error (0)	in-automate.brevo.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:14.018089056 CEST	1.1.1.1	192.168.2.6	0xd5b	No error (0)	in-automate.brevo.com		172.64.150.216	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:14.018089056 CEST	1.1.1.1	192.168.2.6	0xd5b	No error (0)	in-automate.brevo.com		104.18.37.40	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:14.028848886 CEST	1.1.1.1	192.168.2.6	0x4b2a	No error (0)	drive.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:14.275269985 CEST	1.1.1.1	192.168.2.6	0x8101	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:14.275305033 CEST	1.1.1.1	192.168.2.6	0xdc2b	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:16.813556910 CEST	1.1.1.1	192.168.2.6	0xb2dd	No error (0)	drive.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:20.275753975 CEST	1.1.1.1	192.168.2.6	0x2ad3	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:22.386101961 CEST	1.1.1.1	192.168.2.6	0x9994	No error (0)	play.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:22.647676945 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:22.647676945 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	plus.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:22.647715092 CEST	1.1.1.1	192.168.2.6	0xd53b	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:24.038316965 CEST	1.1.1.1	192.168.2.6	0x5dff	No error (0)	blobcomments-pa.clients6.google.com		142.250.185.106	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:25.227003098 CEST	1.1.1.1	192.168.2.6	0x37a9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:25.227003098 CEST	1.1.1.1	192.168.2.6	0x37a9	No error (0)	plus.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:25.227586031 CEST	1.1.1.1	192.168.2.6	0xd172	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:25.518737078 CEST	1.1.1.1	192.168.2.6	0x6b02	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:25.518737078 CEST	1.1.1.1	192.168.2.6	0x6b02	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:25.532187939 CEST	1.1.1.1	192.168.2.6	0x748d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:25.532187939 CEST	1.1.1.1	192.168.2.6	0x748d	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:25.532304049 CEST	1.1.1.1	192.168.2.6	0x5085	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:26.621387005 CEST	1.1.1.1	192.168.2.6	0xa9ab	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.621463060 CEST	1.1.1.1	192.168.2.6	0x7447	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:26.659113884 CEST	1.1.1.1	192.168.2.6	0x2094	No error (0)	blobcomments-pa.clients6.google.com		142.250.185.202	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.715018034 CEST	1.1.1.1	192.168.2.6	0xb731	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:26.792787075 CEST	1.1.1.1	192.168.2.6	0x274d	No error (0)	windowsupdatebg.s.llnwi.net		87.248.204.0	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:28.449592113 CEST	1.1.1.1	192.168.2.6	0xe74a	No error (0)	peoplestackwebexperiments-pa.clients6.google.com		142.250.185.106	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:29.273978949 CEST	1.1.1.1	192.168.2.6	0x5afa	No error (0)	video.google.com	video.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:29.273978949 CEST	1.1.1.1	192.168.2.6	0x5afa	No error (0)	video.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:29.286886930 CEST	1.1.1.1	192.168.2.6	0xedaf	No error (0)	rr4---sn-ab5l6nk6.c.drive.google.com	rr4.sn-ab5l6nk6.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:29.286886930 CEST	1.1.1.1	192.168.2.6	0xedaf	No error (0)	rr4.sn-ab5l6nk6.c.drive.google.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:29.296098948 CEST	1.1.1.1	192.168.2.6	0x467f	No error (0)	video.google.com	video.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:29.312545061 CEST	1.1.1.1	192.168.2.6	0xbe09	No error (0)	rr4---sn-ab5l6nk6.c.drive.google.com	rr4.sn-ab5l6nk6.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:29.312545061 CEST	1.1.1.1	192.168.2.6	0xbe09	No error (0)	rr4.sn-ab5l6nk6.c.drive.google.com		74.125.0.137	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:30.014974117 CEST	1.1.1.1	192.168.2.6	0x7e7	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:30.014974117 CEST	1.1.1.1	192.168.2.6	0x7e7	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:30.015043974 CEST	1.1.1.1	192.168.2.6	0xd0e8	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:30.358618975 CEST	1.1.1.1	192.168.2.6	0x8dd7	No error (0)	rr4---sn-ab5l6nk6.c.drive.google.com	rr4.sn-ab5l6nk6.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:30.358618975 CEST	1.1.1.1	192.168.2.6	0x8dd7	No error (0)	rr4.sn-ab5l6nk6.c.drive.google.com		74.125.0.137	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:30.402844906 CEST	1.1.1.1	192.168.2.6	0x71e4	No error (0)	rr4---sn-ab5l6nk6.c.drive.google.com	rr4.sn-ab5l6nk6.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:30.402844906 CEST	1.1.1.1	192.168.2.6	0x71e4	No error (0)	rr4.sn-ab5l6nk6.c.drive.google.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:30.427069902 CEST	1.1.1.1	192.168.2.6	0x5697	No error (0)	drive.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:31.574007988 CEST	1.1.1.1	192.168.2.6	0x9912	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:31.574007988 CEST	1.1.1.1	192.168.2.6	0x9912	No error (0)	googlehosted.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:31.574373007 CEST	1.1.1.1	192.168.2.6	0x2f3e	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:47.028711081 CEST	1.1.1.1	192.168.2.6	0xdf77	No error (0)	rr2---sn-p5qs7n6d.c.drive.google.com	rr2.sn-p5qs7n6d.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:47.028711081 CEST	1.1.1.1	192.168.2.6	0xdf77	No error (0)	rr2.sn-p5qs7n6d.c.drive.google.com		173.194.7.199	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:47.029153109 CEST	1.1.1.1	192.168.2.6	0xe89a	No error (0)	rr2---sn-p5qs7n6d.c.drive.google.com	rr2.sn-p5qs7n6d.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:47.029153109 CEST	1.1.1.1	192.168.2.6	0xe89a	No error (0)	rr2.sn-p5qs7n6d.c.drive.google.com			65	IN (0x0001)	false
Oct 14, 2024 06:53:48.104571104 CEST	1.1.1.1	192.168.2.6	0x61e1	No error (0)	rr2---sn-p5qs7n6d.c.drive.google.com	rr2.sn-p5qs7n6d.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:48.104571104 CEST	1.1.1.1	192.168.2.6	0x61e1	No error (0)	rr2.sn-p5qs7n6d.c.drive.google.com		173.194.7.199	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:53:48.111085892 CEST	1.1.1.1	192.168.2.6	0x3e6f	No error (0)	rr2---sn-p5qs7n6d.c.drive.google.com	rr2.sn-p5qs7n6d.c.drive.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 06:53:48.111085892 CEST	1.1.1.1	192.168.2.6	0x3e6f	No error (0)	rr2.sn-p5qs7n6d.c.drive.google.com			65	IN (0x0001)	false
Oct 14, 2024 06:54:02.624821901 CEST	1.1.1.1	192.168.2.6	0x7d7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 14, 2024 06:54:02.624821901 CEST	1.1.1.1	192.168.2.6	0x7d7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49715	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:12 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 37 2f 78 51 44 71 4e 50 6b 75 66 6c 64 78 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 62 32 34 64 36 63 62 64 38 30 62 31 38 34 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: w7/xQDqNPkufldx8.1Context: cb24d6cbd80b1843
2024-10-14 04:53:12 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 04:53:12 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 37 2f 78 51 44 71 4e 50 6b 75 66 6c 64 78 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 62 32 34 64 36 63 62 64 38 30 62 31 38 34 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 37 58 70 70 53 4e 2b 71 67 6c 66 6c 4b 76 34 39 37 70 4b 35 57 37 75 41 6f 4f 4d 76 71 56 4a 78 46 35 7a 76 53 30 59 64 34 64 41 71 63 46 42 43 2b 75 38 38 79 65 7a 75 6f 44 43 41 71 4c 34 47 63 4d 43 2b 31 4c 68 56 63 6e 63 31 55 50 2b 6b 56 2b 2b 39 36 57 4a 35 74 67 63 55 35 72 74 38 31 6e 34 65 35 51 65 33 73 6b 71 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: w7/xQDqNPkufldx8.2Context: cb24d6cbd80b1843<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAd7XppSN+qglflKv497pK5W7uAoOMvqVJxF5zvS0Yd4dAqcFBC+u88yezuoDCAqL4GcMC+1LhVcnc1UP+kV++96WJ5tgcU5rt81n4e5Qe3skqB
2024-10-14 04:53:12 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 37 2f 78 51 44 71 4e 50 6b 75 66 6c 64 78 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 62 32 34 64 36 63 62 64 38 30 62 31 38 34 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: w7/xQDqNPkufldx8.3Context: cb24d6cbd80b1843<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-14 04:53:12 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 04:53:12 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 2b 50 49 72 5a 76 57 6f 55 2b 4a 41 71 2b 66 74 42 62 36 4c 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: S+PIrZvWoU+JAq+ftBb6LA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	1.179.112.196	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:12 UTC	723	OUT	GET /mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z HTTP/1.1 Host: 7t8ql.r.ag.d.sendibm3.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 04:53:13 UTC	241	IN	HTTP/1.1 200 OK Content-Length: 772 Content-Type: text/html; charset=utf-8 Date: Mon, 14 Oct 2024 04:53:13 GMT X-Content-Type-Options: nosniff X-Sib-Server: gke-public-cluster-v2-1-179-112-171 X-Xss-Protection: 1 Connection: close
2024-10-14 04:53:13 UTC	772	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 6e 6f 73 63 72 69 70 74 3e 0a 09 09 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 2e 30 3b 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 2f 31 56 4b 54 6e 45 46 4e 73 7a 6c 55 59 44 44 75 34 45 54 2d 55 4d 4a 68 4a 74 52 56 6f 6b 78 65 4d 2f 76 69 65 77 3f 75 73 70 3d 73 68 61 72 69 6e 67 22 3e 0a 09 09 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 69 66 72 61 6d 65 20 73 72 63 3d Data Ascii: <!DOCTYPE html><html><head><title>Redirection</title></head><body><noscript> <meta http-equiv="refresh" content="0.0;https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view?usp=sharing"></noscript> <iframe src=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49720	104.18.39.141	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:13 UTC	707	OUT	GET /cm.html?id=4489679 HTTP/1.1 Host: sibautomation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7t8ql.r.ag.d.sendibm3.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 04:53:13 UTC	393	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Sails <sailsjs.com> vary: Accept-Encoding access-control-allow-origin: * CF-Cache-Status: HIT Age: 6334 Expires: Mon, 14 Oct 2024 06:53:13 GMT Cache-Control: public, max-age=7200 Server: cloudflare CF-RAY: 8d24f6e9f9f20f3a-EWR
2024-10-14 04:53:13 UTC	976	IN	Data Raw: 39 38 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 75 75 69 64 56 34 28 29 20 7b 20 76 61 72 20 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 20 72 65 74 75 72 6e 20 27 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 27 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 20 76 61 72 20 72 20 3d 20 28 64 20 2b 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 29 20 25 20 31 36 20 7c 20 30 3b 20 64 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 Data Ascii: 98d<!DOCTYPE html><html><head><script type="text/javascript"> function uuidV4() { var d = new Date().getTime(); return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c){ var r = (d + Math.random() * 16) % 16 \| 0; d = Math.floor(
2024-10-14 04:53:13 UTC	1369	IN	Data Raw: 69 66 20 28 63 2e 69 6e 64 65 78 4f 66 28 63 6e 29 20 3d 3d 20 30 29 20 72 65 74 75 72 6e 20 63 2e 73 75 62 73 74 72 69 6e 67 28 63 6e 2e 6c 65 6e 67 74 68 2c 20 63 2e 6c 65 6e 67 74 68 29 3b 7d 20 72 65 74 75 72 6e 20 27 27 3b 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 71 73 5f 65 6e 63 6f 64 65 28 6f 29 20 7b 20 76 61 72 20 73 74 72 20 3d 20 5b 5d 3b 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 6f 29 20 7b 20 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 70 29 20 26 26 20 73 74 72 2e 70 75 73 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 29 20 2b 20 22 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 70 5d 29 29 3b 7d 72 65 74 75 72 6e 20 73 74 72 2e 6a 6f 69 6e 28 22 26 22 29 3b 7d 0a 20 20 20 20 Data Ascii: if (c.indexOf(cn) == 0) return c.substring(cn.length, c.length);} return '';} function qs_encode(o) { var str = []; for (var p in o) { o.hasOwnProperty(p) && str.push(encodeURIComponent(p) + "=" + encodeURIComponent(o[p]));}return str.join("&");}
2024-10-14 04:53:13 UTC	107	IN	Data Raw: 28 71 73 2e 63 75 69 64 29 20 7b 63 6d 2e 63 75 69 64 20 3d 20 71 73 2e 63 75 69 64 3b 7d 3b 20 69 66 20 28 63 6d 5f 66 6c 61 67 29 20 7b 72 71 5f 73 65 6e 64 28 63 6d 29 3b 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: (qs.cuid) {cm.cuid = qs.cuid;}; if (cm_flag) {rq_send(cm);} </script></head><body></body></html>
2024-10-14 04:53:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49721	172.64.150.216	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:14 UTC	649	OUT	GET /cm?uuid=2bf2ac4a-59e1-4b80-8d84-c4aa442a3bbc&key=g4casc8t318mm5nhft56zqug&trans=0&user_id=210193 HTTP/1.1 Host: in-automate.brevo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sibautomation.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sibautomation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 04:53:14 UTC	233	IN	HTTP/1.1 204 No Content Date: Mon, 14 Oct 2024 04:53:14 GMT Connection: close access-control-allow-origin: * Cache-Control: no-cache via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d24f6ee4ae90f73-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49725	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:15 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045315Z-17db6f7c8cfq2j6f03aq9y8dns000000053g000000007quw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-14 04:53:15 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-14 04:53:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=129139 Date: Mon, 14 Oct 2024 04:53:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:16 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:16 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3735e006-a01e-006f-3de4-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045316Z-17db6f7c8cfbr2wt66emzt78g400000005f0000000005tv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:16 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:16 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e1b47659-601e-00ab-14a3-1b66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045316Z-17db6f7c8cfhrxld7punfw920n00000004p0000000007ufd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49733	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:16 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:16 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c1f175ba-101e-0028-7611-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045316Z-17db6f7c8cf4g2pjavqhm24vp4000000062000000000cxrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:16 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 1c7a9c3a-e01e-001f-4b80-1b1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cfgqlr45m385mnngs00000004dg00000000ab5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:16 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 8bb3084a-701e-0053-175b-1c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cffhvbz3mt0ydz7x40000000450000000003k1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-14 04:53:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=129079 Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-14 04:53:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49737	142.250.184.238	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	741	OUT	GET /drive-viewer/AKGpihbsYuRPXht5N3qTymeAiJ0CP1I58g8-Tyx5BFqtshSJE0_PVZ-tk7G6s_SraY6NWh4CqJLgs5B2Ag8zlojzedRc816LtsYMfXQ=s1600-rw-v1 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ODPBJ8JDwlvHFjUAiF0BaFqZm-zoRHL5vkC66dsiGnfWkiTTOJa5NsHoXyo-VFhcVXin8l9Lm741f_myh2GybFzLYxVMt7rq9qHQjJ3orc2AZZidD2IrnAWLcdVu_WmQ_6WcBws9tDQDP3-ko-0S5F7iKGUEwbKh4Hszmkrm6JBMLfdClA
2024-10-14 04:53:17 UTC	822	IN	HTTP/1.1 200 OK Content-Type: image/webp Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="ALISEDA CARISA 2.webp" Date: Mon, 14 Oct 2024 04:53:17 GMT Server: fife Content-Length: 2658 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:17 UTC	568	IN	Data Raw: 52 49 46 46 5a 0a 00 00 57 45 42 50 56 50 38 20 4e 0a 00 00 50 36 01 9d 01 2a 40 06 84 03 3e 81 40 9e 4b a5 23 a2 a1 a0 08 00 a0 10 09 69 6e e1 77 61 1b 40 07 a2 01 5d cb c5 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef Data Ascii: RIFFZWEBPVP8 NP6*@>@K#inwa@]{'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!
2024-10-14 04:53:17 UTC	1390	IN	Data Raw: df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 Data Ascii: l9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9
2024-10-14 04:53:17 UTC	700	IN	Data Raw: 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c Data Ascii: !NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 52965a57-601e-000d-5970-1c2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cf9wwz8ehu7c5p33g000000033000000000dnsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cfvzwz27u5rnq9kpc00000006600000000097mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cf9c22xp43k2gbqvn00000003g0000000009zkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: efaf982b-c01e-008e-2e47-1c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cf9wwz8ehu7c5p33g000000038g000000002bgy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:17 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045317Z-17db6f7c8cffhvbz3mt0ydz7x4000000041000000000ct4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:17 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e9ae6f2c-401e-0035-2e04-1c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045318Z-17db6f7c8cfvtw4hh2496wp8p800000004e0000000001b43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045318Z-17db6f7c8cfwtn5x6ye8p8q9m000000004cg00000000e0dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045318Z-17db6f7c8cfspvtq2pgqb2w5k000000005u0000000005b9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0f9ac3ff-201e-0003-4016-1cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045318Z-17db6f7c8cfhrxld7punfw920n00000004n00000000092mp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:18 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: daf35764-401e-008c-13df-1b86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045318Z-17db6f7c8cfvtw4hh2496wp8p8000000049g00000000a3ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:19 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045319Z-17db6f7c8cfmhggkx889x958tc0000000360000000001cf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045319Z-17db6f7c8cfnqpbkckdefmqa4400000005z00000000046xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045319Z-17db6f7c8cfhzb2znbk0zyvf6n00000005n0000000005mkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b287654a-001e-0017-109b-1b0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045319Z-17db6f7c8cfhrxld7punfw920n00000004p0000000007ugx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:19 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 55879866-201e-0033-5b1c-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045319Z-17db6f7c8cfjxfnba42c5rukwg00000002zg000000000tvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49755	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 44 33 31 53 4d 39 6f 5a 55 61 45 78 44 58 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 31 66 61 61 61 35 37 34 35 64 63 38 37 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: SD31SM9oZUaExDXL.1Context: 901faaa5745dc87d
2024-10-14 04:53:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 04:53:20 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 53 44 33 31 53 4d 39 6f 5a 55 61 45 78 44 58 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 31 66 61 61 61 35 37 34 35 64 63 38 37 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 37 58 70 70 53 4e 2b 71 67 6c 66 6c 4b 76 34 39 37 70 4b 35 57 37 75 41 6f 4f 4d 76 71 56 4a 78 46 35 7a 76 53 30 59 64 34 64 41 71 63 46 42 43 2b 75 38 38 79 65 7a 75 6f 44 43 41 71 4c 34 47 63 4d 43 2b 31 4c 68 56 63 6e 63 31 55 50 2b 6b 56 2b 2b 39 36 57 4a 35 74 67 63 55 35 72 74 38 31 6e 34 65 35 51 65 33 73 6b 71 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: SD31SM9oZUaExDXL.2Context: 901faaa5745dc87d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAd7XppSN+qglflKv497pK5W7uAoOMvqVJxF5zvS0Yd4dAqcFBC+u88yezuoDCAqL4GcMC+1LhVcnc1UP+kV++96WJ5tgcU5rt81n4e5Qe3skqB
2024-10-14 04:53:20 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 53 44 33 31 53 4d 39 6f 5a 55 61 45 78 44 58 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 31 66 61 61 61 35 37 34 35 64 63 38 37 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: SD31SM9oZUaExDXL.3Context: 901faaa5745dc87d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-14 04:53:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 04:53:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 76 67 57 2b 6f 47 4d 79 45 53 66 78 62 74 4b 34 33 76 61 63 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AvgW+oGMyESfxbtK43vacQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045320Z-17db6f7c8cfq2j6f03aq9y8dns00000004zg00000000g17v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:20 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045320Z-17db6f7c8cfqkqk8bn4ck6f72000000005n000000000b2ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:20 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045320Z-17db6f7c8cfbd7pgux3k6qfa6000000004sg000000009p5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045320Z-17db6f7c8cfqxt4wrzg7st2fm800000005y000000000crva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:20 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045320Z-17db6f7c8cfpm9w8b1ybgtytds00000003tg00000000arwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:21 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 483006ab-801e-0035-465b-1c752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045321Z-17db6f7c8cf9c22xp43k2gbqvn00000003hg000000007av0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:21 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: b93fa8e6-a01e-0002-462b-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045321Z-17db6f7c8cfpm9w8b1ybgtytds00000003wg0000000044d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045321Z-17db6f7c8cffhvbz3mt0ydz7x4000000040000000000fvhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: f30ac50d-201e-0033-27d7-1ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045321Z-17db6f7c8cf5mtxmr1c51513n000000006600000000024d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045321Z-17db6f7c8cfwtn5x6ye8p8q9m000000004f0000000009mac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49763	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:21 UTC	956	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3631 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ODPBJ8JDwlvHFjUAiF0BaFqZm-zoRHL5vkC66dsiGnfWkiTTOJa5NsHoXyo-VFhcVXin8l9Lm741f_myh2GybFzLYxVMt7rq9qHQjJ3orc2AZZidD2IrnAWLcdVu_WmQ_6WcBws9tDQDP3-ko-0S5F7iKGUEwbKh4Hszmkrm6JBMLfdClA
2024-10-14 04:53:21 UTC	3631	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 38 38 38 31 35 39 39 31 32 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 32 38 38 38 31 35 39 39 31 32 34 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 32 38 38 38 31 35 39 39 31 32 34 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 5d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[4,0,0,0,0]]],189,[["1728881599125",null,null,null,null,null,null,"[[[null,null,1,1728881599124000,null,null,null,[[1728881599124000],null,1],null,716,null,1,1]
2024-10-14 04:53:21 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; expires=Tue, 15-Apr-2025 04:53:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 04:53:21 GMT Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045322Z-17db6f7c8cfvq8pt2ak3arkg6n00000003x0000000006gh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045322Z-17db6f7c8cfhzb2znbk0zyvf6n00000005p0000000003mcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a0484e99-b01e-00ab-3354-1cdafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045322Z-17db6f7c8cfmhggkx889x958tc000000036g000000000f5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4ea1e91c-d01e-0066-2741-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045322Z-17db6f7c8cfcrfgzd01a8emnyg00000003bg00000000b1rq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d28b635f-001e-0079-686d-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045322Z-17db6f7c8cf6f7vv3recfp4a6w000000032g000000000hxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:22 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49783	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	964	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5846 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:22 UTC	5846	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 38 38 38 31 36 30 30 35 31 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],189,[["1728881600513",null,null,null,
2024-10-14 04:53:22 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49787	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:22 UTC	986	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 914 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:22 UTC	914	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 38 38 38 31 35 39 39 35 37 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[1,0,0,0,0]]],373,[["1728881599574",null,null,null,
2024-10-14 04:53:22 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: aa8fb35a-601e-003d-30cd-1a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cf4g2pjavqhm24vp4000000061000000000dd6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e237e346-101e-0079-251d-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cf8rgvlb86c9c00980000000440000000000r3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49795	142.250.186.46	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	648	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:23 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:23 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-14 04:53:23 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cfp6mfve0htepzbps00000005a00000000086at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cfjxfnba42c5rukwg00000002wg000000006nna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 13e99002-401e-0067-75aa-1c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cfcl4jvqfdxaxz9w800000003bg000000003r1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49797	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	1008	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:23 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 126135 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 13 Oct 2024 20:17:01 GMT Expires: Mon, 13 Oct 2025 20:17:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 30982 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:23 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e Data Ascii: efined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object.
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=functi
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolve
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d Data Ascii: egular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}}
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 Data Ascii: his.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&&
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: t,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.prototy
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 Data Ascii: ize!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 4111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49796	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	1019	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:23 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208050 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 01:34:18 GMT Expires: Wed, 08 Oct 2025 01:34:18 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 530345 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:23 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 7a 68 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 4c 6f 3d 5f 2e 6b 66 28 5f 2e 76 66 2c 22 72 77 22 2c 5f 2e 6c 66 28 29 29 3b 0a 76 61 72 20 4d 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 4c 6f 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 4e 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 4c 6f 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 67 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.zh=(window.gapi\|\|{}).load;_.Lo=_.kf(_.vf,"rw",_.lf());var Mo=function(a,b){(a=_.Lo[a])&&a.state<b&&(a.state=b)};var No=function(a){a=(a=_.Lo[a])?a.oid:void 0;if(a){var b=_.gf.getElementById(a);b&&b.parentNode
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 51 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 79 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 65 69 67 68 74 3d 63 2e 68 65 69 Data Ascii: +"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Qo=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.hei
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 50 6f 28 65 29 7d 7d 3b 0a 5f 2e 4e 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 54 2e 77 68 65 72 65 3d 62 3b 72 65 74 75 72 6e 20 61 7d 3b 5f Data Ascii: e=function(e){e=e.getIframeEl();e.style.cssText=_.Po(e)}};_.Nj=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.To=function(a,b){a.T.where=b;return a};_
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 65 70 5b 63 5d 26 26 64 26 26 28 5f 2e 56 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 65 70 29 5f 2e 65 70 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 70 66 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 56 6f 5b 65 5d 3d 62 29 7d 5f 2e 66 70 3d 21 30 7d 65 3d 5f 2e 6c 66 28 29 3b 5f 2e 6e 66 28 5f 2e 56 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 68 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 2e 6d 61 74 63 68 28 2f 5e 68 74 74 70 73 3f 25 33 41 2f 69 29 26 26 28 62 3d 64 65 63 6f 64 65 55 52 49 Data Ascii: =a[b].content;_.ep[c]&&d&&(_.Vo[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.ep)_.ep[e]>0&&(b=_.pf(a,e,""))&&(_.Vo[e]=b)}_.fp=!0}e=_.lf();_.nf(_.Vo,e);return e};hp=function(a){var b;a.match(/^https?%3A/i)&&(b=decodeURI
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 30 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 6c 6e 2e 63 61 6c 6c 28 74 70 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 7d 61 3d 61 2e 73 74 79 6c 65 3b 28 63 3d 75 70 28 61 26 26 61 2e 68 65 69 67 68 74 29 29 26 26 28 62 2e 68 65 69 67 68 74 3d 53 74 72 69 6e Data Ascii: 0,d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.ln.call(tp,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)}a=a.style;(c=up(a&&a.height))&&(b.height=Strin
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 6c 66 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d 30 3f 6d 3d 6c 2e 73 75 62 73 74 72 28 32 29 3a 28 6e 3d 28 6e 3d 53 74 72 69 6e 67 28 6b 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 6b 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c Data Ascii: d=a.getElementsByTagName("*");a=_.lf();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==0?m=l.substr(2):(n=(n=String(k.className\|\|k.getAttribute("cl
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 48 66 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 6f 70 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 6f 70 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 79 6d 28 5f 2e 67 66 2c 6c 2e 72 65 70 6c 61 63 65 28 5f 2e 52 6d 2c 64 70 28 66 29 29 29 3b 6d 3d 22 69 66 72 61 6d 65 73 2f 22 2b 61 2b 22 2f 70 61 72 61 6d 73 2f 22 3b 66 3d 7b 7d 3b 5f 2e 6e 66 28 63 2c 66 29 3b Data Ascii: ion,m=a+"/"+c.action);(l=_.Hf("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in op)f[n]=n+"/"+(c[n]\|\|op[n])+"/";var n=_.ym(_.gf,l.replace(_.Rm,dp(f)));m="iframes/"+a+"/params/";f={};_.nf(c,f);
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 6c 66 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 4c 6f 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 4a 70 28 61 2c 62 29 29 7d 7d 2c 4b 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 62 29 7b 69 66 28 63 29 72 65 74 75 72 6e 20 31 3b 69 66 28 41 70 5b 62 5d 29 7b 69 66 28 61 70 5b 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 Data Ascii: c,u,v,h);b=h.id;c=_.lf();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Lo[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),Jp(a,b))}},Kp=function(a,b,c){if(a&&a.nodeType===1&&b){if(c)return 1;if(Ap[b]){if(ap[a.nodeName.toLowerCase()])
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 2c 22 5f 77 74 73 72 74 22 2c 63 29 2c 66 2e 74 69 63 6b 28 22 74 62 73 64 5f 22 2c 22 77 74 73 72 74 5f 22 29 29 7d 74 72 79 7b 62 3d 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 26 26 28 62 3d 4d 61 74 68 2e 66 6c Data Ascii: =b.navigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_","_wtsrt",c),f.tick("tbsd_","wtsrt_"))}try{b=null,window.chrome&&window.chrome.csi&&(b=Math.fl
2024-10-14 04:53:23 UTC	1390	IN	Data Raw: 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 65 72 6e 61 74 65 50 72 6f 74 6f 63 6f 6c 41 76 61 69 6c 61 62 6c 65 26 26 28 64 2b 3d 22 26 61 70 61 3d 31 22 29 7d 76 61 72 20 68 3d 61 2e 74 2c 6b 3d 68 2e 73 74 61 72 74 3b 65 3d 5b 5d 3b 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 68 29 69 66 28 6c 21 3d 0a 22 73 74 61 72 74 22 26 26 6c 2e 69 6e 64 65 78 Data Ascii: tchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlternateProtocolAvailable&&(d+="&apa=1")}var h=a.t,k=h.start;e=[];f=[];for(var l in h)if(l!="start"&&l.index

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cfnqpbkckdefmqa4400000005yg0000000051xg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cf96l6t7bwyfgbkhw00000004v000000000du0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cfqxt4wrzg7st2fm8000000060g0000000073s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cfgqlr45m385mnngs00000004dg00000000ab7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0fbb1da2-e01e-0085-1521-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045323Z-17db6f7c8cf8rgvlb86c9c0098000000042g000000003ru0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49810	142.250.186.46	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	648	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 14 Oct 2024 04:53:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:24 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-14 04:53:24 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49813	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	965	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 17629 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:24 UTC	16384	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 38 38 38 31 36 30 32 39 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],189,[["1728881602937",null,null,null,
2024-10-14 04:53:24 UTC	1245	OUT	Data Raw: 36 32 2c 39 34 36 32 35 31 36 33 2c 39 34 36 32 35 31 37 31 2c 39 34 36 35 38 31 30 33 2c 39 34 36 35 38 31 31 39 2c 39 34 36 36 31 38 34 32 2c 39 34 36 36 31 38 35 30 2c 39 34 37 30 37 34 36 34 2c 39 34 37 30 37 34 37 32 2c 39 34 37 32 34 39 37 30 2c 39 34 37 32 34 39 38 36 2c 39 34 37 34 35 35 32 33 2c 39 34 37 34 35 35 33 31 2c 39 34 37 38 34 36 35 31 2c 39 34 37 38 34 36 35 39 2c 39 34 38 31 33 34 34 33 2c 39 34 38 31 33 34 35 31 2c 39 34 39 30 34 31 30 39 2c 39 34 39 30 34 31 31 37 2c 39 34 39 32 39 32 37 30 2c 39 34 39 32 39 32 37 38 2c 39 34 39 34 32 34 35 30 2c 39 34 39 34 32 34 35 38 2c 39 35 30 38 37 30 36 36 2c 39 35 30 38 37 30 37 34 2c 39 35 30 38 37 33 33 37 2c 39 35 30 38 37 33 34 35 2c 39 35 31 30 34 32 33 39 2c 39 35 31 30 34 32 34 37 2c Data Ascii: 62,94625163,94625171,94658103,94658119,94661842,94661850,94707464,94707472,94724970,94724986,94745523,94745531,94784651,94784659,94813443,94813451,94904109,94904117,94929270,94929278,94942450,94942458,95087066,95087074,95087337,95087345,95104239,95104247,
2024-10-14 04:53:25 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:24 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49817	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	986	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 919 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:24 UTC	919	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 38 38 38 31 36 30 32 30 35 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[1,0,0,0,0]]],373,[["1728881602057",null,null,null,
2024-10-14 04:53:25 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:24 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045324Z-17db6f7c8cfbd7pgux3k6qfa6000000004v0000000004dba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 01727dbb-701e-0032-7b9f-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045324Z-17db6f7c8cfq2j6f03aq9y8dns000000050g00000000dq2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045324Z-17db6f7c8cf4g2pjavqhm24vp4000000065g0000000046b1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 64ee2c34-901e-0048-70e2-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045324Z-17db6f7c8cfqxt4wrzg7st2fm8000000064g0000000002a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d280ac0f-001e-0079-3c69-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045324Z-17db6f7c8cfmhggkx889x958tc000000033000000000716z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49824	142.250.186.46	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	648	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 14 Oct 2024 04:53:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:25 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-14 04:53:25 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045325Z-17db6f7c8cfcl4jvqfdxaxz9w8000000036000000000fx5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 401112aa-201e-005d-70d7-1aafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045325Z-17db6f7c8cfhzb2znbk0zyvf6n00000005ng0000000040kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045325Z-17db6f7c8cfp6mfve0htepzbps000000057000000000fhmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90f8132d-901e-002a-0d47-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045325Z-17db6f7c8cfmhggkx889x958tc000000035g00000000286t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8f8e431e-b01e-0097-6fac-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045325Z-17db6f7c8cfhrxld7punfw920n00000004t00000000001n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49835	142.250.186.174	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	796	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:26 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208050 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 01:34:18 GMT Expires: Wed, 08 Oct 2025 01:34:18 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 530348 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:26 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 7a 68 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 4c 6f 3d 5f 2e 6b 66 28 5f 2e 76 66 2c 22 72 77 22 2c 5f 2e 6c 66 28 29 29 3b 0a 76 61 72 20 4d 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 4c 6f 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 4e 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 4c 6f 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 67 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.zh=(window.gapi\|\|{}).load;_.Lo=_.kf(_.vf,"rw",_.lf());var Mo=function(a,b){(a=_.Lo[a])&&a.state<b&&(a.state=b)};var No=function(a){a=(a=_.Lo[a])?a.oid:void 0;if(a){var b=_.gf.getElementById(a);b&&b.parentNode
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 51 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 79 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 65 69 67 68 74 3d 63 2e 68 65 69 Data Ascii: +"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Qo=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.hei
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 50 6f 28 65 29 7d 7d 3b 0a 5f 2e 4e 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 54 2e 77 68 65 72 65 3d 62 3b 72 65 74 75 72 6e 20 61 7d 3b 5f Data Ascii: e=function(e){e=e.getIframeEl();e.style.cssText=_.Po(e)}};_.Nj=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.To=function(a,b){a.T.where=b;return a};_
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 65 70 5b 63 5d 26 26 64 26 26 28 5f 2e 56 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 65 70 29 5f 2e 65 70 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 70 66 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 56 6f 5b 65 5d 3d 62 29 7d 5f 2e 66 70 3d 21 30 7d 65 3d 5f 2e 6c 66 28 29 3b 5f 2e 6e 66 28 5f 2e 56 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 68 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 2e 6d 61 74 63 68 28 2f 5e 68 74 74 70 73 3f 25 33 41 2f 69 29 26 26 28 62 3d 64 65 63 6f 64 65 55 52 49 Data Ascii: =a[b].content;_.ep[c]&&d&&(_.Vo[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.ep)_.ep[e]>0&&(b=_.pf(a,e,""))&&(_.Vo[e]=b)}_.fp=!0}e=_.lf();_.nf(_.Vo,e);return e};hp=function(a){var b;a.match(/^https?%3A/i)&&(b=decodeURI
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 30 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 6c 6e 2e 63 61 6c 6c 28 74 70 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 7d 61 3d 61 2e 73 74 79 6c 65 3b 28 63 3d 75 70 28 61 26 26 61 2e 68 65 69 67 68 74 29 29 26 26 28 62 2e 68 65 69 67 68 74 3d 53 74 72 69 6e Data Ascii: 0,d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.ln.call(tp,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)}a=a.style;(c=up(a&&a.height))&&(b.height=Strin
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 6c 66 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d 30 3f 6d 3d 6c 2e 73 75 62 73 74 72 28 32 29 3a 28 6e 3d 28 6e 3d 53 74 72 69 6e 67 28 6b 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 6b 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c Data Ascii: d=a.getElementsByTagName("*");a=_.lf();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==0?m=l.substr(2):(n=(n=String(k.className\|\|k.getAttribute("cl
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 48 66 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 6f 70 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 6f 70 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 79 6d 28 5f 2e 67 66 2c 6c 2e 72 65 70 6c 61 63 65 28 5f 2e 52 6d 2c 64 70 28 66 29 29 29 3b 6d 3d 22 69 66 72 61 6d 65 73 2f 22 2b 61 2b 22 2f 70 61 72 61 6d 73 2f 22 3b 66 3d 7b 7d 3b 5f 2e 6e 66 28 63 2c 66 29 3b Data Ascii: ion,m=a+"/"+c.action);(l=_.Hf("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in op)f[n]=n+"/"+(c[n]\|\|op[n])+"/";var n=_.ym(_.gf,l.replace(_.Rm,dp(f)));m="iframes/"+a+"/params/";f={};_.nf(c,f);
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 6c 66 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 4c 6f 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 4a 70 28 61 2c 62 29 29 7d 7d 2c 4b 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 62 29 7b 69 66 28 63 29 72 65 74 75 72 6e 20 31 3b 69 66 28 41 70 5b 62 5d 29 7b 69 66 28 61 70 5b 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 Data Ascii: c,u,v,h);b=h.id;c=_.lf();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Lo[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),Jp(a,b))}},Kp=function(a,b,c){if(a&&a.nodeType===1&&b){if(c)return 1;if(Ap[b]){if(ap[a.nodeName.toLowerCase()])
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 2c 22 5f 77 74 73 72 74 22 2c 63 29 2c 66 2e 74 69 63 6b 28 22 74 62 73 64 5f 22 2c 22 77 74 73 72 74 5f 22 29 29 7d 74 72 79 7b 62 3d 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 26 26 28 62 3d 4d 61 74 68 2e 66 6c Data Ascii: =b.navigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_","_wtsrt",c),f.tick("tbsd_","wtsrt_"))}try{b=null,window.chrome&&window.chrome.csi&&(b=Math.fl
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 65 72 6e 61 74 65 50 72 6f 74 6f 63 6f 6c 41 76 61 69 6c 61 62 6c 65 26 26 28 64 2b 3d 22 26 61 70 61 3d 31 22 29 7d 76 61 72 20 68 3d 61 2e 74 2c 6b 3d 68 2e 73 74 61 72 74 3b 65 3d 5b 5d 3b 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 68 29 69 66 28 6c 21 3d 0a 22 73 74 61 72 74 22 26 26 6c 2e 69 6e 64 65 78 Data Ascii: tchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlternateProtocolAvailable&&(d+="&apa=1")}var h=a.t,k=h.start;e=[];f=[];for(var l in h)if(l!="start"&&l.index

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49832	172.217.18.4	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	964	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:26 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Mon, 14 Oct 2024 04:53:26 GMT Expires: Mon, 14 Oct 2024 04:53:26 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:26 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-10-14 04:53:26 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49833	142.250.184.238	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	760	OUT	GET /drive-viewer/AKGpihbsYuRPXht5N3qTymeAiJ0CP1I58g8-Tyx5BFqtshSJE0_PVZ-tk7G6s_SraY6NWh4CqJLgs5B2Ag8zlojzedRc816LtsYMfXQ=w1920-h1080-k-rw-v1-pd HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:26 UTC	822	IN	HTTP/1.1 200 OK Content-Type: image/webp Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="ALISEDA CARISA 2.webp" Date: Mon, 14 Oct 2024 04:53:26 GMT Server: fife Content-Length: 3778 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:26 UTC	568	IN	Data Raw: 52 49 46 46 ba 0e 00 00 57 45 42 50 56 50 38 20 ae 0e 00 00 b0 ba 01 9d 01 2a 80 07 38 04 3e 81 40 9e 4b a5 23 a2 a1 a0 08 00 a0 10 09 69 6e e1 77 61 1b 40 07 a2 01 5d cb c5 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef Data Ascii: RIFFWEBPVP8 *8>@K#inwa@]{'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 Data Ascii: l9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c Data Ascii: !NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl
2024-10-14 04:53:26 UTC	430	IN	Data Raw: 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 db 27 21 ef b6 4e 43 df 6c 9c 87 be d9 39 0f 7d b2 72 1e fb 64 e4 3d f6 c9 c8 7b ed 93 90 f7 d6 00 00 fe fd 99 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={'!NCl9}rd={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49836	142.250.186.174	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:25 UTC	785	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:26 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 126135 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 13 Oct 2024 20:17:01 GMT Expires: Mon, 13 Oct 2025 20:17:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 30985 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:26 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e Data Ascii: efined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object.
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=functi
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolve
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d Data Ascii: egular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}}
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 Data Ascii: his.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&&
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: t,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.prototy
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 Data Ascii: ize!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 4111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49839	142.250.184.238	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	726	OUT	GET /get_video_info?docid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&drive_originator_app=303 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=LUUIGn4wBrI
2024-10-14 04:53:26 UTC	1214	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 04:53:26 GMT Report-To: {"group":"coop_gse_l9ocaq","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_l9ocaq"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_l9ocaq" Content-Security-Policy: script-src 'report-sample' 'nonce-lw2Qu8cWQMPHC3D2y4U85w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/drive-explorer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/c9cd1776275257ba2b0145e36346db5a X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: DRIVE_STREAM=XR0Y0_3TJx8; Domain=.drive.google.com; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:26 UTC	176	IN	Data Raw: 35 36 34 38 0d 0a 73 74 61 74 75 73 3d 6f 6b 26 68 6c 3d 65 6e 5f 55 53 26 61 6c 6c 6f 77 5f 65 6d 62 65 64 3d 30 26 70 73 3d 64 6f 63 73 26 70 61 72 74 6e 65 72 69 64 3d 33 30 26 61 75 74 6f 70 6c 61 79 3d 30 26 61 62 64 3d 30 26 64 6f 63 69 64 3d 31 56 4b 54 6e 45 46 4e 73 7a 6c 55 59 44 44 75 34 45 54 2d 55 4d 4a 68 4a 74 52 56 6f 6b 78 65 4d 26 65 6c 3d 65 6d 62 65 64 26 74 69 74 6c 65 3d 41 4c 49 53 45 44 41 2b 43 41 52 49 53 41 2b 32 2e 6d 70 34 26 42 41 53 45 5f 55 52 4c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: 5648status=ok&hl=en_US&allow_embed=0&ps=docs&partnerid=30&autoplay=0&abd=0&docid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&el=embed&title=ALISEDA+CARISA+2.mp4&BASE_URL=https%3A%2F%2F
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 25 32 46 26 69 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6c 68 33 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 25 32 46 64 72 69 76 65 2d 73 74 6f 72 61 67 65 25 32 46 41 4a 51 57 74 42 50 59 74 42 5a 4c 46 69 6c 4a 4d 52 63 50 35 4d 6a 64 47 46 71 50 70 4e 4a 74 6a 30 7a 64 6f 75 6e 52 48 6b 4a 67 72 35 6f 38 31 64 68 6f 6f 75 58 68 2d 63 70 4a 74 31 50 49 37 74 63 58 61 62 2d 6d 6b 50 56 31 6c 4c 36 77 39 37 6b 36 73 33 65 4d 36 4e 73 75 38 4b 42 62 47 6b 54 6e 43 51 73 72 46 67 25 33 44 73 35 31 32 26 63 63 33 5f 6d 6f 64 75 6c 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 79 74 69 6d 67 2e 63 6f 6d 25 32 46 79 74 25 32 46 73 77 66 62 69 6e 25 32 46 73 75 62 74 69 Data Ascii: drive.google.com%2F&iurl=https%3A%2F%2Flh3.googleusercontent.com%2Fdrive-storage%2FAJQWtBPYtBZLFilJMRcP5MjdGFqPpNJtj0zdounRHkJgr5o81dhoouXh-cpJt1PI7tcXab-mkPV1lL6w97k6s3eM6Nsu8KBbGkTnCQsrFg%3Ds512&cc3_module=https%3A%2F%2Fs.ytimg.com%2Fyt%2Fswfbin%2Fsubti
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 25 32 35 32 43 65 69 25 32 35 32 43 69 70 25 32 35 32 43 69 64 25 32 35 32 43 69 74 61 67 25 32 35 32 43 73 6f 75 72 63 65 25 32 35 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 35 32 43 78 70 63 25 32 35 32 43 74 74 6c 25 32 35 32 43 73 75 73 63 25 32 35 32 43 64 72 69 76 65 69 64 25 32 35 32 43 61 70 70 25 32 35 32 43 65 61 75 61 25 32 35 32 43 6d 69 6d 65 25 32 35 32 43 76 70 72 76 25 32 35 32 43 70 72 76 25 32 35 32 43 72 71 68 25 32 35 32 43 63 6e 72 25 32 35 32 43 64 75 72 25 32 35 32 43 6c 6d 74 25 32 36 73 69 67 25 33 44 41 4a 66 51 64 53 73 77 52 51 49 68 41 4f 6b 65 56 45 38 6d 5a 79 32 47 32 39 65 54 53 73 59 78 31 75 62 4c 7a 49 73 66 6e 44 4d 34 47 47 71 74 2d 52 35 69 43 6b 44 56 41 69 41 76 49 69 32 53 66 38 64 31 39 46 44 4e 37 4f 39 30 50 56 Data Ascii: %252Cei%252Cip%252Cid%252Citag%252Csource%252Crequiressl%252Cxpc%252Cttl%252Csusc%252Cdriveid%252Capp%252Ceaua%252Cmime%252Cvprv%252Cprv%252Crqh%252Ccnr%252Cdur%252Clmt%26sig%3DAJfQdSswRQIhAOkeVE8mZy2G29eTSsYx1ubLzIsfnDM4GGqt-R5iCkDVAiAvIi2Sf8d19FDN7O90PV
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 68 45 34 35 31 56 7a 70 32 4f 4a 39 6f 32 6f 73 6c 38 4d 50 30 44 7a 6a 41 49 34 64 39 33 4d 33 46 59 4f 41 69 41 43 66 42 77 76 43 30 4d 54 4c 68 31 56 41 34 41 33 54 43 6c 33 32 46 77 6e 35 62 78 65 42 6d 65 4e 6c 55 75 41 54 58 6c 62 34 77 25 33 44 25 33 44 25 32 36 6c 73 70 61 72 61 6d 73 25 33 44 6d 65 74 25 32 35 32 43 6d 68 25 32 35 32 43 6d 6d 25 32 35 32 43 6d 6e 25 32 35 32 43 6d 73 25 32 35 32 43 6d 76 25 32 35 32 43 6d 76 69 25 32 35 32 43 70 6c 25 32 35 32 43 72 6d 73 25 32 36 6c 73 69 67 25 33 44 41 43 4a 30 70 48 67 77 52 41 49 67 4f 4d 44 65 70 55 54 62 70 5f 59 4c 56 32 4d 6d 33 49 5f 6e 4b 5f 4a 63 73 58 4a 74 33 56 58 72 71 76 76 49 5a 67 61 4f 30 6b 30 43 49 46 52 68 6b 61 6a 4c 30 6a 57 31 46 46 6d 4f 38 76 4d 37 30 70 44 6b 6a 45 38 Data Ascii: hE451Vzp2OJ9o2osl8MP0DzjAI4d93M3FYOAiACfBwvC0MTLh1VA4A3TCl32Fwn5bxeBmeNlUuATXlb4w%3D%3D%26lsparams%3Dmet%252Cmh%252Cmm%252Cmn%252Cms%252Cmv%252Cmvi%252Cpl%252Crms%26lsig%3DACJ0pHgwRAIgOMDepUTbp_YLV2Mm3I_nK_JcsXJt3VXrqvvIZgaO0k0CIFRhkajL0jW1FFmO8vM70pDkjE8
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 61 50 41 78 62 78 30 6a 65 4b 7a 68 74 77 73 6e 48 71 4b 62 35 6b 41 69 45 41 6f 61 42 63 50 71 61 4c 4b 56 6c 70 50 33 5f 76 66 78 73 6b 55 64 43 5f 33 76 77 67 7a 45 55 37 35 6c 4d 43 56 71 72 5f 5f 49 4d 25 33 44 26 75 72 6c 5f 65 6e 63 6f 64 65 64 5f 66 6d 74 5f 73 74 72 65 61 6d 5f 6d 61 70 3d 69 74 61 67 25 33 44 31 38 25 32 36 75 72 6c 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 72 72 34 2d 2d 2d 73 6e 2d 61 62 35 6c 36 6e 6b 36 2e 63 2e 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 25 32 35 32 46 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 25 32 35 33 46 65 78 70 69 72 65 25 32 35 33 44 31 37 32 38 38 39 32 34 30 36 25 32 35 32 36 65 69 25 32 35 33 44 78 71 4d 4d 5a 38 47 35 47 4e 4f 66 32 4c 59 50 73 63 6d 48 2d 51 49 25 32 Data Ascii: aPAxbx0jeKzhtwsnHqKb5kAiEAoaBcPqaLKVlpP3_vfxskUdC_3vwgzEU75lMCVqr__IM%3D&url_encoded_fmt_stream_map=itag%3D18%26url%3Dhttps%253A%252F%252Frr4---sn-ab5l6nk6.c.drive.google.com%252Fvideoplayback%253Fexpire%253D1728892406%2526ei%253DxqMMZ8G5GNOf2LYPscmH-QI%2
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 7a 44 5a 4e 6a 37 30 44 6a 70 4d 43 5f 6e 37 30 56 6b 4e 79 52 6e 54 62 48 66 32 6d 41 69 45 41 35 57 6e 4c 70 46 35 44 77 44 75 41 70 4c 5a 51 42 2d 57 53 4e 51 39 64 36 6a 52 49 53 71 4a 78 6a 39 5a 44 64 49 4f 37 6e 54 51 25 32 35 33 44 25 32 36 74 79 70 65 25 33 44 76 69 64 65 6f 25 32 35 32 46 6d 70 34 25 32 35 33 42 25 32 42 63 6f 64 65 63 73 25 32 35 33 44 25 32 35 32 32 61 76 63 31 2e 34 32 30 30 31 45 25 32 35 32 43 25 32 42 6d 70 34 61 2e 34 30 2e 32 25 32 35 32 32 25 32 36 71 75 61 6c 69 74 79 25 33 44 6d 65 64 69 75 6d 25 32 43 69 74 61 67 25 33 44 32 32 25 32 36 75 72 6c 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 72 72 34 2d 2d 2d 73 6e 2d 61 62 35 6c 36 6e 6b 36 2e 63 2e 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: zDZNj70DjpMC_n70VkNyRnTbHf2mAiEA5WnLpF5DwDuApLZQB-WSNQ9d6jRISqJxj9ZDdIO7nTQ%253D%26type%3Dvideo%252Fmp4%253B%2Bcodecs%253D%2522avc1.42001E%252C%2Bmp4a.40.2%2522%26quality%3Dmedium%2Citag%3D22%26url%3Dhttps%253A%252F%252Frr4---sn-ab5l6nk6.c.drive.google.co
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 43 6d 6e 25 32 35 32 43 6d 73 25 32 35 32 43 6d 76 25 32 35 32 43 6d 76 69 25 32 35 32 43 70 6c 25 32 35 32 43 72 6d 73 25 32 35 32 36 6c 73 69 67 25 32 35 33 44 41 43 4a 30 70 48 67 77 52 41 49 67 4f 4d 44 65 70 55 54 62 70 5f 59 4c 56 32 4d 6d 33 49 5f 6e 4b 5f 4a 63 73 58 4a 74 33 56 58 72 71 76 76 49 5a 67 61 4f 30 6b 30 43 49 46 52 68 6b 61 6a 4c 30 6a 57 31 46 46 6d 4f 38 76 4d 37 30 70 44 6b 6a 45 38 79 6c 31 38 31 6f 4d 4e 62 4b 47 6c 4a 73 74 6a 33 25 32 36 74 79 70 65 25 33 44 76 69 64 65 6f 25 32 35 32 46 6d 70 34 25 32 35 33 42 25 32 42 63 6f 64 65 63 73 25 32 35 33 44 25 32 35 32 32 61 76 63 31 2e 34 32 30 30 31 45 25 32 35 32 43 25 32 42 6d 70 34 61 2e 34 30 2e 32 25 32 35 32 32 25 32 36 71 75 61 6c 69 74 79 25 33 44 68 64 37 32 30 25 32 43 Data Ascii: Cmn%252Cms%252Cmv%252Cmvi%252Cpl%252Crms%2526lsig%253DACJ0pHgwRAIgOMDepUTbp_YLV2Mm3I_nK_JcsXJt3VXrqvvIZgaO0k0CIFRhkajL0jW1FFmO8vM70pDkjE8yl181oMNbKGlJstj3%26type%3Dvideo%252Fmp4%253B%2Bcodecs%253D%2522avc1.42001E%252C%2Bmp4a.40.2%2522%26quality%3Dhd720%2C
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 77 57 35 6e 77 75 72 48 56 72 61 64 6a 32 6d 56 42 35 7a 4f 42 75 4d 65 30 25 32 35 33 44 25 32 35 32 36 6c 73 70 61 72 61 6d 73 25 32 35 33 44 6d 65 74 25 32 35 32 43 6d 68 25 32 35 32 43 6d 6d 25 32 35 32 43 6d 6e 25 32 35 32 43 6d 73 25 32 35 32 43 6d 76 25 32 35 32 43 6d 76 69 25 32 35 32 43 70 6c 25 32 35 32 43 72 6d 73 25 32 35 32 36 6c 73 69 67 25 32 35 33 44 41 43 4a 30 70 48 67 77 52 67 49 68 41 4e 36 71 54 42 57 55 70 79 73 30 57 34 5a 6c 49 46 58 52 39 70 61 50 41 78 62 78 30 6a 65 4b 7a 68 74 77 73 6e 48 71 4b 62 35 6b 41 69 45 41 6f 61 42 63 50 71 61 4c 4b 56 6c 70 50 33 5f 76 66 78 73 6b 55 64 43 5f 33 76 77 67 7a 45 55 37 35 6c 4d 43 56 71 72 5f 5f 49 4d 25 32 35 33 44 25 32 36 74 79 70 65 25 33 44 76 69 64 65 6f 25 32 35 32 46 6d 70 34 25 Data Ascii: wW5nwurHVradj2mVB5zOBuMe0%253D%2526lsparams%253Dmet%252Cmh%252Cmm%252Cmn%252Cms%252Cmv%252Cmvi%252Cpl%252Crms%2526lsig%253DACJ0pHgwRgIhAN6qTBWUpys0W4ZlIFXR9paPAxbx0jeKzhtwsnHqKb5kAiEAoaBcPqaLKVlpP3_vfxskUdC_3vwgzEU75lMCVqr__IM%253D%26type%3Dvideo%252Fmp4%
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 36 6e 6b 36 25 32 43 73 6e 2d 70 35 71 73 37 6e 36 64 25 35 43 75 30 30 32 36 6d 73 25 33 44 73 75 25 32 43 6f 6e 72 25 35 43 75 30 30 32 36 6d 76 25 33 44 75 25 35 43 75 30 30 32 36 6d 76 69 25 33 44 34 25 35 43 75 30 30 32 36 70 6c 25 33 44 32 33 25 35 43 75 30 30 32 36 72 6d 73 25 33 44 73 75 25 32 43 73 75 25 35 43 75 30 30 32 36 74 74 6c 25 33 44 74 72 61 6e 73 69 65 6e 74 25 35 43 75 30 30 32 36 73 75 73 63 25 33 44 64 72 25 35 43 75 30 30 32 36 64 72 69 76 65 69 64 25 33 44 31 56 4b 54 6e 45 46 4e 73 7a 6c 55 59 44 44 75 34 45 54 2d 55 4d 4a 68 4a 74 52 56 6f 6b 78 65 4d 25 35 43 75 30 30 32 36 61 70 70 25 33 44 65 78 70 6c 6f 72 65 72 25 35 43 75 30 30 32 36 65 61 75 61 25 33 44 33 6d 79 6d 70 6f 6a 72 2d 55 67 25 35 43 75 30 30 32 36 6d 69 6d 65 Data Ascii: 6nk6%2Csn-p5qs7n6d%5Cu0026ms%3Dsu%2Conr%5Cu0026mv%3Du%5Cu0026mvi%3D4%5Cu0026pl%3D23%5Cu0026rms%3Dsu%2Csu%5Cu0026ttl%3Dtransient%5Cu0026susc%3Ddr%5Cu0026driveid%3D1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM%5Cu0026app%3Dexplorer%5Cu0026eaua%3D3mympojr-Ug%5Cu0026mime
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 25 35 43 25 32 32 61 76 63 31 2e 36 34 30 30 31 46 25 35 43 25 32 32 25 32 32 25 32 43 25 32 32 70 72 6f 6a 65 63 74 69 6f 6e 54 79 70 65 25 32 32 25 33 41 25 32 32 52 45 43 54 41 4e 47 55 4c 41 52 25 32 32 25 32 43 25 32 32 71 75 61 6c 69 74 79 25 32 32 25 33 41 25 32 32 68 64 37 32 30 25 32 32 25 32 43 25 32 32 71 75 61 6c 69 74 79 4c 61 62 65 6c 25 32 32 25 33 41 25 32 32 37 32 30 70 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 72 34 2d 2d 2d 73 6e 2d 61 62 35 6c 36 6e 6b 36 2e 63 2e 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 25 32 46 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 25 33 46 65 78 70 69 72 65 25 33 44 31 37 32 38 38 39 32 34 30 36 25 35 43 75 30 30 32 36 65 69 25 33 44 78 71 4d Data Ascii: %5C%22avc1.64001F%5C%22%22%2C%22projectionType%22%3A%22RECTANGULAR%22%2C%22quality%22%3A%22hd720%22%2C%22qualityLabel%22%3A%22720p%22%2C%22url%22%3A%22https%3A%2F%2Frr4---sn-ab5l6nk6.c.drive.google.com%2Fvideoplayback%3Fexpire%3D1728892406%5Cu0026ei%3DxqM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49841	142.250.186.142	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	887	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:26 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14684 Date: Mon, 14 Oct 2024 04:53:26 GMT Expires: Mon, 14 Oct 2024 04:53:26 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "7388ca8f66955866" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:26 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 7d 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 28 29 3b 74 68 69 73 2e 6f 3d 22 22 7d 3b 41 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 7d 3b 76 61 72 20 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 28 29 3b 74 68 69 73 2e 73 3d 61 7d 3b 44 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 7d 3b 6e 65 77 20 44 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 44 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 45 3d 5b 5d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 Data Ascii: "Bad secret");};var A=function(){y();this.o=""};A.prototype.toString=function(){return this.o};var D=function(a){y();this.s=a};D.prototype.toString=function(){return this.s};new D("about:blank");new D("about:invalid#zClosurez");var E=[],F=function(a){cons
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 51 2e 72 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 64 28 61 2c 62 2c 63 29 3a 64 2e 70 75 73 68 28 5b 61 2c 62 2c 63 5d 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 26 26 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 3d 70 61 28 62 29 2c 63 26 26 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 2b 3d 22 5f 5f 5f 22 2b 70 61 28 63 29 29 2c 62 2e 6c 65 6e 67 74 68 3e 32 38 26 26 28 62 3d 62 2e 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 4a 28 6e 61 2c 22 5f 70 22 2c 4d 28 29 29 2c 4a 28 62 2c 63 2c 4d 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d Data Ascii: (a,b,c){var d=Q.r;typeof d==="function"?d(a,b,c):d.push([a,b,c])},S=function(a,b,c){b&&b.length>0&&(b=pa(b),c&&c.length>0&&(b+="___"+pa(c)),b.length>28&&(b=b.substr(0,28)+(b.length-28)),c=b,b=J(na,"_p",M()),J(b,c,M())[a]=(new Date).getTime(),R(a,"_p",c))}
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 67 74 68 26 26 28 70 3d 22 22 2b 70 2b 61 2b 22 6f 6c 3d 22 2b 7a 2e 6c 65 6e 67 74 68 29 7d 7d 63 61 74 63 68 28 47 29 7b 7d 72 65 74 75 72 6e 20 70 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 41 61 28 61 29 3b 75 61 2e 74 65 73 74 28 63 29 7c 7c 56 28 22 69 6e 76 61 6c 69 64 5f 63 61 6c 6c 62 61 63 6b 22 29 3b 62 3d 42 61 28 62 29 3b 64 3d 64 26 26 64 2e 6c 65 6e 67 74 68 3f 42 61 28 64 29 3a 6e 75 6c 6c 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 Data Ascii: gth&&(p=""+p+a+"ol="+z.length)}}catch(G){}return p},Ca=function(a,b,c,d){a=Aa(a);ua.test(c)\|\|V("invalid_callback");b=Ba(b);d=d&&d.length?Ba(d):null;var e=function(f){return encodeURIComponent(f).replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix)
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 2f 67 3b 71 61 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 61 3d 61 5b 30 5d 29 7c 7c 56 28 22 6d 69 73 73 69 6e 67 5f 68 69 6e 74 22 29 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2b 43 61 28 61 2c 62 2c 63 2c 64 29 7d 3b 76 61 72 20 58 3d 64 65 63 6f 64 65 55 52 49 28 22 25 37 33 63 72 69 70 74 22 29 2c 44 61 3d 2f 5e 5b 2d 2b 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 Data Ascii: /g;qa.m=function(a,b,c,d){(a=a[0])\|\|V("missing_hint");return"https://apis.google.com"+Ca(a,b,c,d)};var X=decodeURI("%73cript"),Da=/^[-+_0-9\/A-Za-z]+={0,2}$/,Ea=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4b 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 6a 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 64 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 65 3d 62 2e 63 6f 6e 66 69 67 2c 66 3d 62 2e 74 69 6d 65 6f 75 74 2c 6b 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 74 79 70 65 6f 66 20 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 70 3d 6c 29 3b 76 61 72 20 71 3d 6e 75 6c 6c 2c 7a 3d 21 31 3b 69 66 28 66 26 26 21 6b 7c 7c 21 66 26 26 6b 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 Data Ascii: : !hint");Ka(b\|\|[],c,a)},Ka=function(a,b,c){a=ja(a)\|\|[];var d=b.callback,e=b.config,f=b.timeout,k=b.ontimeout,l=b.onerror,p=void 0;typeof l=="function"&&(p=l);var q=null,z=!1;if(f&&!k\|\|!f&&k)throw"Timeout requires both the timeout parameter and ontimeout
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 4f 61 3d 4e 2e 6c 6f 61 64 3b 4f 61 26 26 4a 28 4f 2c 22 6f 6c 22 2c 5b 5d 29 2e 70 75 73 68 28 4f 61 29 3b 4e 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 49 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 61 28 61 2c 62 29 7d 29 7d 3b 55 2e 75 6e 73 68 69 66 74 28 5b 22 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 61 7c 7c 62 26 26 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d Data Ascii: w c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Oa=N.load;Oa&&J(O,"ol",[]).push(Oa);N.load=function(a,b){return Ia(function(){return La(a,b)})};U.unshift(["url",function(a,b,c){!a\|\|b&&b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 79 6f 75 74 75 62 65 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 73 63 72 6f 6c 6c 22 2c 22 6f 70 65 6e 77 69 6e 64 6f 77 22 5d 7d 2c 79 74 73 75 62 73 63 72 69 62 65 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 5f 65 6d 62 65 64 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 5f 63 69 72 63 6c 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 Data Ascii: prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_shar
2024-10-14 04:53:26 UTC	1390	IN	Data Raw: 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 70 6f 73 74 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 73 69 67 6e 69 6e 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 69 67 6e 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 6f 6e 61 75 74 68 22 5d 7d 2c 72 62 72 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 Data Ascii: :""},url:":socialhost:/:session_prefix::im_prefix:_/widget/render/post?usegapi=1"},signin:{params:{url:""},url:":socialhost:/:session_prefix:_/widget/render/signin?usegapi=1",methods:["onauth"]},rbr_i:{params:{url:""},url:":socialhost:/:session_prefix::se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49843	142.250.186.46	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	648	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 14 Oct 2024 04:53:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:26 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-14 04:53:26 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045326Z-17db6f7c8cfqxt4wrzg7st2fm8000000061g000000005kkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:26 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:26 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: cfcae410-f01e-0099-6e2b-1c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045326Z-17db6f7c8cfp6mfve0htepzbps00000005dg000000001fcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:26 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:26 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c9088ac8-401e-0015-21a8-1c0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045326Z-17db6f7c8cfqxt4wrzg7st2fm8000000062g000000003s2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:26 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 4b275f89-001e-0049-42aa-1c5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045326Z-17db6f7c8cf9wwz8ehu7c5p33g000000033000000000dnxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:26 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:26 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045326Z-17db6f7c8cfmhggkx889x958tc000000036g000000000f7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:26 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49850	142.250.186.46	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	648	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 14 Oct 2024 04:53:27 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:27 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-14 04:53:27 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49851	142.250.186.132	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	678	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:27 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Mon, 14 Oct 2024 04:53:27 GMT Expires: Mon, 14 Oct 2024 04:53:27 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:27 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-10-14 04:53:27 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49852	142.250.186.174	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	657	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:27 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14684 Date: Mon, 14 Oct 2024 04:53:27 GMT Expires: Mon, 14 Oct 2024 04:53:27 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "7388ca8f66955866" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:27 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 7d 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 28 29 3b 74 68 69 73 2e 6f 3d 22 22 7d 3b 41 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 7d 3b 76 61 72 20 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 28 29 3b 74 68 69 73 2e 73 3d 61 7d 3b 44 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 7d 3b 6e 65 77 20 44 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 44 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 45 3d 5b 5d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 Data Ascii: "Bad secret");};var A=function(){y();this.o=""};A.prototype.toString=function(){return this.o};var D=function(a){y();this.s=a};D.prototype.toString=function(){return this.s};new D("about:blank");new D("about:invalid#zClosurez");var E=[],F=function(a){cons
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 51 2e 72 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 64 28 61 2c 62 2c 63 29 3a 64 2e 70 75 73 68 28 5b 61 2c 62 2c 63 5d 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 26 26 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 3d 70 61 28 62 29 2c 63 26 26 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 2b 3d 22 5f 5f 5f 22 2b 70 61 28 63 29 29 2c 62 2e 6c 65 6e 67 74 68 3e 32 38 26 26 28 62 3d 62 2e 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 4a 28 6e 61 2c 22 5f 70 22 2c 4d 28 29 29 2c 4a 28 62 2c 63 2c 4d 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d Data Ascii: (a,b,c){var d=Q.r;typeof d==="function"?d(a,b,c):d.push([a,b,c])},S=function(a,b,c){b&&b.length>0&&(b=pa(b),c&&c.length>0&&(b+="___"+pa(c)),b.length>28&&(b=b.substr(0,28)+(b.length-28)),c=b,b=J(na,"_p",M()),J(b,c,M())[a]=(new Date).getTime(),R(a,"_p",c))}
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 67 74 68 26 26 28 70 3d 22 22 2b 70 2b 61 2b 22 6f 6c 3d 22 2b 7a 2e 6c 65 6e 67 74 68 29 7d 7d 63 61 74 63 68 28 47 29 7b 7d 72 65 74 75 72 6e 20 70 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 41 61 28 61 29 3b 75 61 2e 74 65 73 74 28 63 29 7c 7c 56 28 22 69 6e 76 61 6c 69 64 5f 63 61 6c 6c 62 61 63 6b 22 29 3b 62 3d 42 61 28 62 29 3b 64 3d 64 26 26 64 2e 6c 65 6e 67 74 68 3f 42 61 28 64 29 3a 6e 75 6c 6c 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 Data Ascii: gth&&(p=""+p+a+"ol="+z.length)}}catch(G){}return p},Ca=function(a,b,c,d){a=Aa(a);ua.test(c)\|\|V("invalid_callback");b=Ba(b);d=d&&d.length?Ba(d):null;var e=function(f){return encodeURIComponent(f).replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix)
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 2f 67 3b 71 61 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 61 3d 61 5b 30 5d 29 7c 7c 56 28 22 6d 69 73 73 69 6e 67 5f 68 69 6e 74 22 29 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2b 43 61 28 61 2c 62 2c 63 2c 64 29 7d 3b 76 61 72 20 58 3d 64 65 63 6f 64 65 55 52 49 28 22 25 37 33 63 72 69 70 74 22 29 2c 44 61 3d 2f 5e 5b 2d 2b 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 Data Ascii: /g;qa.m=function(a,b,c,d){(a=a[0])\|\|V("missing_hint");return"https://apis.google.com"+Ca(a,b,c,d)};var X=decodeURI("%73cript"),Da=/^[-+_0-9\/A-Za-z]+={0,2}$/,Ea=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4b 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 6a 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 64 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 65 3d 62 2e 63 6f 6e 66 69 67 2c 66 3d 62 2e 74 69 6d 65 6f 75 74 2c 6b 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 74 79 70 65 6f 66 20 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 70 3d 6c 29 3b 76 61 72 20 71 3d 6e 75 6c 6c 2c 7a 3d 21 31 3b 69 66 28 66 26 26 21 6b 7c 7c 21 66 26 26 6b 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 Data Ascii: : !hint");Ka(b\|\|[],c,a)},Ka=function(a,b,c){a=ja(a)\|\|[];var d=b.callback,e=b.config,f=b.timeout,k=b.ontimeout,l=b.onerror,p=void 0;typeof l=="function"&&(p=l);var q=null,z=!1;if(f&&!k\|\|!f&&k)throw"Timeout requires both the timeout parameter and ontimeout
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 4f 61 3d 4e 2e 6c 6f 61 64 3b 4f 61 26 26 4a 28 4f 2c 22 6f 6c 22 2c 5b 5d 29 2e 70 75 73 68 28 4f 61 29 3b 4e 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 49 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 61 28 61 2c 62 29 7d 29 7d 3b 55 2e 75 6e 73 68 69 66 74 28 5b 22 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 61 7c 7c 62 26 26 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d Data Ascii: w c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Oa=N.load;Oa&&J(O,"ol",[]).push(Oa);N.load=function(a,b){return Ia(function(){return La(a,b)})};U.unshift(["url",function(a,b,c){!a\|\|b&&b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 79 6f 75 74 75 62 65 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 73 63 72 6f 6c 6c 22 2c 22 6f 70 65 6e 77 69 6e 64 6f 77 22 5d 7d 2c 79 74 73 75 62 73 63 72 69 62 65 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 5f 65 6d 62 65 64 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 5f 63 69 72 63 6c 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 Data Ascii: prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_shar
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 70 6f 73 74 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 73 69 67 6e 69 6e 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 69 67 6e 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 6f 6e 61 75 74 68 22 5d 7d 2c 72 62 72 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 Data Ascii: :""},url:":socialhost:/:session_prefix::im_prefix:_/widget/render/post?usegapi=1"},signin:{params:{url:""},url:":socialhost:/:session_prefix:_/widget/render/signin?usegapi=1",methods:["onauth"]},rbr_i:{params:{url:""},url:":socialhost:/:session_prefix::se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49856	142.250.186.142	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	1008	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:27 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 82296 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 02:56:44 GMT Expires: Wed, 08 Oct 2025 02:56:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 525403 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:27 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e Data Ascii: efined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object.
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=functi
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolve
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d Data Ascii: egular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}}
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 Data Ascii: his.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&&
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: t,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.prototy
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 Data Ascii: ize!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-10-14 04:53:27 UTC	1390	IN	Data Raw: 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 4111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045327Z-17db6f7c8cfbr2wt66emzt78g400000005k0000000000b3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 90b8fb57-901e-002a-182e-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045327Z-17db6f7c8cfgqlr45m385mnngs00000004dg00000000ab9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045327Z-17db6f7c8cfhzb2znbk0zyvf6n00000005kg000000007qux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1bfa4875-a01e-0084-0b1c-1c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045327Z-17db6f7c8cffhvbz3mt0ydz7x400000004700000000007ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:27 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: c0a86c07-d01e-007a-0a2f-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045327Z-17db6f7c8cfvq8pt2ak3arkg6n00000003u000000000d14d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cfhzb2znbk0zyvf6n00000005q0000000001d75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 24028bf8-401e-00a3-4b1c-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cf9wwz8ehu7c5p33g0000000360000000006wbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cfbr2wt66emzt78g400000005h0000000001unz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 581fb33a-501e-00a0-339b-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cfvq8pt2ak3arkg6n00000003t000000000gray x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cf5mtxmr1c51513n0000000066g0000000014nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49872	142.250.186.174	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	778	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:28 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 82296 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 02:56:44 GMT Expires: Wed, 08 Oct 2025 02:56:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 525404 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:28 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e Data Ascii: efined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object.
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=functi
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolve
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d Data Ascii: egular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}}
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 Data Ascii: his.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&&
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: t,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.prototy
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 Data Ascii: ize!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-10-14 04:53:28 UTC	1390	IN	Data Raw: 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 4111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cf6qp7g7r97wxgbqc000000055000000000cb1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045328Z-17db6f7c8cfcrfgzd01a8emnyg00000003d00000000085fw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 103aeaae-201e-0051-661c-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cf9c22xp43k2gbqvn00000003f000000000c3g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 5a424671-801e-00ac-17e6-1cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cfmhggkx889x958tc000000035g0000000028a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 36d40921-f01e-0085-6daa-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cfspvtq2pgqb2w5k000000005v0000000003swa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 739bd3f0-001e-0034-450f-1cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cf8rgvlb86c9c00980000000440000000000r5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 529596da-301e-001f-21a5-1caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cf9wwz8ehu7c5p33g000000033g00000000cvf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cf8rgvlb86c9c0098000000044g0000000004d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1a8c6bd5-d01e-0014-0747-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cf6f7vv3recfp4a6w00000002v000000000gmhq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2551f31e-501e-00a3-36a9-1cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045329Z-17db6f7c8cfmhggkx889x958tc0000000360000000001cn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49893	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	1927	OUT	POST /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=134&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=video/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=13215778&dur=267.267&lmt=1727806976676935&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIhAPRyiGN60jr25qc4R2s3bbFkfa2QoKIATH1QMdCgz1AOAiBSP7yWw6jzfwNhZfztsbZGgoomXd8cEIbzGsEgm-r2xQ==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRAIgcDmFN4FfWXXwqY9XQFmsWxnvzpqFb0gQLbHDlkRC1YYCIC8lgdmvfSskVHNYAJw9ItWlggFgpC5jAk2dHGZugpss&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=0-130255&rn=1&rbuf=0&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:29 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-10-14 04:53:29 UTC	964	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:22:56 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:29 GMT Expires: Mon, 14 Oct 2024 04:53:29 GMT Cache-Control: private, max-age=10496 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://youtube.googleapis.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://youtube.googleapis.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:29 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-10-14 04:53:29 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 86 01 20 c7 a8 d7 c8 e6 ed 88 03 30 00 6a 0c 08 86 01 10 c7 a8 d7 c8 e6 ed 88 03 70 d0 f9 07 Data Ascii: /DCgR0Q6nyWw 0jp
2024-10-14 04:53:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:29 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-10-14 04:53:29 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-10-14 04:53:29 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 63 31 6d 70 34 31 00 00 02 a2 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e3 21 ee 78 e3 21 ee 78 00 00 5d c0 00 61 e0 48 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 06 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e3 21 ee 78 e3 21 ee 78 00 00 00 01 00 00 00 00 00 61 e0 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6avc1mp41moovlmvhd!x!x]aH@(mvex trextrak\tkhd!x!xaH
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 74 f7 c2 a4 80 bb 91 0d 19 5b f4 ff f3 5f 0e 1f d1 59 71 fe fb df 12 b8 97 c6 bf b1 2f 89 7c 4b e2 5f 12 f8 d7 f6 35 c6 0c 36 25 f1 2f 89 7c 4b e2 5f 12 f8 97 c4 be 25 f1 2f 89 7c 2a eb ff f6 f9 83 ff 55 e8 33 2d 1c 47 3e ed 89 24 d4 c8 01 a5 f8 2c 59 30 5d de f7 ab e2 5b 17 89 7c 4b e6 0f ff bb b0 49 e5 ca cd ff 7c 3b 04 cb 97 0b 9e 1a 6c 34 8f 4f 4f ff ae 12 01 07 f0 8a ef a9 b3 13 c1 4e 19 70 88 98 6f eb fd b6 e9 e9 df 30 6f 77 df f2 09 e2 79 53 63 b7 04 39 f0 64 06 70 4a cb d9 9e 7b e3 15 5f 12 a2 b8 97 c4 3e 25 de 25 f1 2f 89 7c 4b e2 5f 12 f8 97 c2 a4 86 e4 c5 ff ff 89 77 8d 7f 63 5f d8 d7 f6 35 fd 89 7c 4b e2 5f 12 f8 97 c4 be 25 c5 78 22 00 de 82 2a 8b ef f0 55 5a ab b9 b3 ae ff 19 dd eb aa c9 98 ba a3 04 3e 1f d8 57 97 05 6e 2b 7c 28 d0 60 42 0c Data Ascii: t[_Yq/\|K_56%/\|K_%/\|U3-G>$,Y0][\|KI\|;l4OONpo0owySc9dpJ{_>%%/\|K_wc_5\|K_%x"UZ>Wn+\|(`B
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 0c d5 ce 88 a6 f8 fd f7 a4 aa 36 30 8c 4e c8 0e 83 2e 2f c0 e5 66 6f 45 14 5f cc be 4f e3 22 ea 5e 23 82 e2 e5 e2 e2 e5 e2 e2 e2 e2 e2 e2 f3 7f e1 f4 ab 9e 94 ad 3e ab aa b1 9b fe 10 f4 a5 20 fa 51 d6 5f 49 ee 21 c2 66 ac b3 7f ea f8 53 fb cb 4a d7 de 2b 85 14 21 f2 60 7b eb 81 20 b2 99 ae dd 34 da f9 87 f8 03 c7 a4 ed 3b 36 6f 88 7d ab 4f 12 e3 4e 66 f2 97 7f a4 b2 e2 ad db aa cd 9f 16 64 ff fe 95 b7 7d ae 6c c9 89 2b a6 50 bb 60 4c fc 03 af 34 c7 0c 36 dc 69 ff eb 8f 07 03 2a a2 e2 e6 cc bd 45 c2 b8 c1 27 c9 78 ba ac 34 a1 3b 1b 6d ff fd f1 0a 7a 4c 1f c3 fb 34 93 35 24 c3 a6 2a 3d cd f6 33 0f 1f fe 85 27 e3 f2 2f ad df 86 14 73 df da ff 48 a6 1f f8 7d 3e 35 ed fe 95 55 2a c3 0a 04 40 fc 66 13 f4 db 6f e7 dd cf 8c 97 8b 8b 8b 97 8b 8b 8b c8 ba a8 b8 ba Data Ascii: 60N./foE_O"^#> Q_I!fSJ+!`{ 4;6o}ONfd}l+P`L46iE'x4;mzL45$=3'/sH}>5U*@fo
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 1f ff e9 4d 47 de e9 da 8c fe 7d b2 c9 4a a4 c9 6d e8 db 37 ff fa 59 7e 4f 3e 7a 75 50 37 dd df 86 a3 99 80 3f ff 57 d5 ff 53 4f cd 47 d4 34 c8 a8 cb fb 73 7f ff a7 79 05 06 5a 5a 41 e1 a3 56 7c b5 46 62 0b 69 37 ff fa 7c b4 25 a0 6f fa b5 d0 39 bf ff d0 9e 33 ea 0d c9 89 26 65 ad 58 37 9b ff fc 86 de 99 af 67 73 de d9 bf ff d2 d1 94 8e 81 b3 29 12 ad e7 e3 fb 69 be 6f ff f4 a7 20 b9 f2 0c d8 3e a1 2e ab 40 f5 1e 3e 47 76 cd ff fe 9d d8 fa 7b 59 31 9f 35 ad a9 7f fc 64 4f 0b 31 4c 53 0a 9f 17 96 62 98 a6 29 8b 8a 62 98 a6 22 41 2f f0 a2 13 c2 f2 f1 21 a0 b8 b9 7c cc 17 97 a8 b8 ba 8b f6 5f c3 8b 16 2c 14 c7 23 0c 95 89 98 7e 7e 5e 31 e3 cf 95 52 77 65 ff 30 d2 21 91 75 2f 50 b1 94 ca 17 ca ac dd 55 86 33 91 0c 67 9e 5f 21 69 94 c9 78 d6 43 1c b9 30 ec 3a Data Ascii: MG}Jm7Y~O>zuP7?WSOG4syZZAV\|Fbi7\|%o93&eX7gs)io >.@>Gv{Y15dO1LSb)b"A/!\|_,#~~^1Rwe0!u/PU3g_!ixC0:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49894	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	1929	OUT	POST /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=140&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=audio/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=4327556&dur=267.331&lmt=1727806982613995&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIgdv0JU5Zm4rFaAMW1NZf0rNHRuYq9BnQsGN4mUY74STMCIQCTGwmHNiiSFfD38qVKtu8QANjiNqnUwOstPOqUYgENeA==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRQIhAKDH4iGVxsHI1PwUujmukPfcSXbuKxGV50S0FxkL9_ZRAiAaj22437gpzERsBjvgLK3Y6UMn2cWmCsSN5IoJ210QYg==&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=0-66614&rn=2&rbuf=0&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:29 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-10-14 04:53:29 UTC	964	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:23:02 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:29 GMT Expires: Mon, 14 Oct 2024 04:53:29 GMT Cache-Control: private, max-age=10496 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://youtube.googleapis.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://youtube.googleapis.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:29 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-10-14 04:53:29 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 8c 01 20 eb d7 c1 cb e6 ed 88 03 30 00 6a 0c 08 8c 01 10 eb d7 c1 cb e6 ed 88 03 70 b7 88 04 Data Ascii: /DCgR0Q6nyWw 0jp
2024-10-14 04:53:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:29 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-10-14 04:53:29 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-10-14 04:53:29 UTC	16384	IN	Data Raw: 00 00 00 18 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 6d 70 34 31 00 00 02 bb 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e3 21 ee 78 e3 21 ee 78 00 00 ac 44 00 b3 e4 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c4 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e3 21 ee 78 e3 21 ee 78 00 00 00 01 00 00 00 00 00 b3 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 Data Ascii: ftypdashiso6mp41moovlmvhd!x!xD@(mvex trextrak\tkhd!x!x
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 9b 8f b0 62 67 b0 ca 56 38 72 7a dd 0a 18 3f 34 cf 58 4e 1f ac 38 75 59 a4 a0 2c 1d 83 b3 7e 77 40 e6 de 71 59 e5 3a fd 90 3e 27 a0 6b 3d e2 df 92 e7 1f f7 7f 57 fa 1a 9f 9e ed bb 0d 8f ba c6 d0 2e fd e8 fd d4 df 1e d0 97 ff 6d 57 34 cb f9 ee 35 f4 f9 46 92 ff 62 f9 60 32 a7 30 5e 83 2e f3 e0 34 3b 27 1e b2 47 fa 54 fd a4 17 b7 19 8d 9d 8d c1 d7 1a 65 b7 3f 50 38 b0 f9 ae 8a 87 ae ec 74 5f 2d a9 ba b4 4e b0 ab d4 4c e3 51 76 95 8e 21 67 1d de 77 dd 82 cd b1 6b 5e 1e 25 f6 df 60 c8 e7 39 ed b7 41 ae d8 72 87 f1 5e 6f ad dc 33 7c ea 79 c6 8f 7d 7d 4f 9b 3f 64 ac 56 6c 01 4a d6 bf 2d 3c dd 35 6d 89 99 d4 0c e0 e5 57 49 02 07 12 da 4b ab 6f 57 a1 ef 95 2d 22 7a b4 d9 d1 3b cc 3a 8a b9 38 67 2d 8f 29 ac 42 9c 5c df ef 8a 63 ab 12 01 40 1f 58 dc 00 00 00 00 00 Data Ascii: bgV8rz?4XN8uY,~w@qY:>'k=W.mW45Fb`20^.4;'GTe?P8t_-NLQv!gwk^%`9Ar^o3\|y}}O?dVlJ-<5mWIKoW-"z;:8g-)B\c@X
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: e3 58 77 78 bd f6 cc 83 77 7f 43 f9 7e 27 c6 5f 78 e3 1c 5f c0 ec 5f 95 94 c0 f6 cf 63 93 9f de 34 07 49 9a c1 d8 ba cc 84 1a 1b 73 de 26 66 1a b3 d5 76 3e e9 c8 f9 75 94 cd b2 d7 09 41 be e5 52 16 5c 02 54 b0 9d 6f 3c a9 51 d1 33 e0 0a 75 63 bc dd ab 79 ca ba 4f 14 bd a2 d1 18 84 47 24 fe 2b da 58 b5 af af 7d 47 aa bc e7 cd a8 6f 4b f5 8a bd 25 30 aa a7 e8 b2 bc 4d 5a b1 0a 16 43 2b cb 3e d7 71 d7 bc 6c cb f5 fa b7 0a ab e3 f3 2c a5 c0 33 1b aa 94 b0 66 27 6c 27 23 52 f9 21 d7 8a 69 3c a1 51 64 31 83 2e 8d c1 35 86 81 2c 94 53 d7 23 5e 28 e8 0c 31 ce fa 44 88 4e 97 2d 3d 72 9a 80 b6 4a c0 24 37 7d 72 30 af 85 02 48 df 1c ff 0f 16 20 a0 0f ac 69 00 00 00 00 00 00 00 00 00 f8 21 1a 94 3d ea 94 61 02 80 46 52 6a f1 16 c3 ad ea f1 72 d3 91 8f 51 26 2f a0 9f Data Ascii: XwxwC~'_x__c4Is&fv>uAR\To<Q3ucyOG$+X}GoK%0MZC+>ql,3f'l'#R!i<Qd1.5,S#^(1DN-=rJ$7}r0H i!=aFRjrQ&/
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: ed 8e dd df 74 2a af 54 53 d0 db 04 c9 eb 4d 7c ce f0 cc 43 71 6d 3d 9e ac ad 11 c5 bf 13 df db 4a e5 73 3a ba 0a 9d f4 97 6f 37 57 b0 bb 6b 8a ac 1d 37 6d cf 34 d5 7a c2 f9 c5 68 70 fb 0e 0a bc ff d5 54 9a 7a bb 9d 5f 8a a6 15 d9 cd 60 36 3a b7 32 b1 bb b7 d2 c8 c3 5a 38 16 d4 ef fd 04 ac 15 8a ff 49 82 ea d2 03 c2 c9 07 43 6c 6d af 3f e8 9f ac 78 5d 76 58 d1 c9 c8 d3 21 03 71 82 72 f7 54 1c 51 af 53 e4 4a 29 30 53 85 63 cc 49 39 6c 4e 36 27 d4 50 12 b3 04 b0 24 d8 50 ee 66 e6 2a 8d aa 55 a2 77 ff ed 00 50 07 d6 37 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 21 1a 94 1d ee 90 e2 02 98 b2 93 59 a5 82 f1 5a 89 ac 92 5c cc 14 5c 62 25 06 a9 df fc a7 97 3a ca 4a bc f3 e7 65 ac db 5a 6b 72 f2 87 32 d9 1d 1f 47 d3 93 0b ea 91 f8 6c bb bf ef 8f 0f c7 e1 c2 Data Ascii: tTSM\|Cqm=Js:o7Wk7m4zhpTz_`6:2Z8IClm?x]vX!qrTQSJ)0ScI9lN6'P$PfUwP7!YZ\\b%:JeZkr2Gl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49891	172.217.18.14	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:29 UTC	1850	OUT	POST /api/stats/qoe?fmt=134&cpn=sxKOFrQHdQ0DzukG&el=leaf&ns=gd&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C36343%2C9954%2C1192%2C33462%2C2%2C46919%2C7611%2C4582%2C1103%2C6953%2C11044%2C2471%2C7546%2C17801%2C24021%2C2128%2C1336%2C4205%2C1823%2C3186%2C2912%2C4794%2C3102%2C3840%2C4%2C404%2C1582%2C18891%2C8%2C76%2C8012%2C2543%2C304%2C7632%2C934%2C373%2C3188%2C84%2C13%2C808%2C229%2C1322%2C409%2C1175%2C3%2C119%2C366%2C574%2C1110%2C1884%2C1313%2C277%2C4653&cl=683840428&seq=1&event=streamingstats&docid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.011:N&ctmp=hbut:t.0;status.not_present,hbut:t.1;status.not_present&cat=streaming&vfs=0.011:134:136::r&view=0.011:1236:692&bwe=0.011:85197&vis=0.011:0&cmt=0.011:0.000&bh=0.011:0.000&qclc=ChBzeEtPRnJRSGRRMER6dWtHEAE HTTP/1.1 Host: video.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:30 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49895	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	964	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5616 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:30 UTC	5616	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 38 38 38 31 36 30 38 31 39 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],189,[["1728881608192",null,null,null,
2024-10-14 04:53:30 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:30 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045330Z-17db6f7c8cfhrxld7punfw920n00000004k000000000ehu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:30 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045330Z-17db6f7c8cf9c22xp43k2gbqvn00000003m0000000004e9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 4dc67717-001e-005a-3747-1cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045330Z-17db6f7c8cfpm9w8b1ybgtytds00000003y00000000013p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045330Z-17db6f7c8cfwtn5x6ye8p8q9m000000004hg000000004b6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3704a696-901e-0048-3641-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045330Z-17db6f7c8cfvzwz27u5rnq9kpc000000063g00000000fr8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49903	142.250.185.161	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	839	OUT	GET /drive-storage/AJQWtBP51xmDayO177Cu2hlTmLgPBm_fdzpys_Wjx3cxmGoJnkQ5Clw0h8bHEzH99AuRaHAcAujFc8xx6IbDxJfjQM-jkya0wb50YqSG=s512 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 04:53:31 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="ALISEDA CARISA 2.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 04:53:31 GMT Server: fife Content-Length: 2008 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:31 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 02 02 02 02 02 02 02 02 02 02 02 02 08 02 02 02 02 02 0a 07 07 06 08 02 0a 02 02 02 0a 02 02 02 02 06 05 02 02 05 02 02 02 05 0a 05 05 07 08 09 09 09 02 03 0b 0c 0a 08 0c 06 08 09 08 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 01 20 02 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF
2024-10-14 04:53:31 UTC	1149	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49904	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	1935	OUT	POST /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=134&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=video/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=13215778&dur=267.267&lmt=1727806976676935&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIhAPRyiGN60jr25qc4R2s3bbFkfa2QoKIATH1QMdCgz1AOAiBSP7yWw6jzfwNhZfztsbZGgoomXd8cEIbzGsEgm-r2xQ==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRAIgcDmFN4FfWXXwqY9XQFmsWxnvzpqFb0gQLbHDlkRC1YYCIC8lgdmvfSskVHNYAJw9ItWlggFgpC5jAk2dHGZugpss&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=130256-239314&rn=3&rbuf=2711&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:30 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-10-14 04:53:30 UTC	964	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:22:56 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:30 GMT Expires: Mon, 14 Oct 2024 04:53:30 GMT Cache-Control: private, max-age=10495 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://youtube.googleapis.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://youtube.googleapis.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:30 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-10-14 04:53:30 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 86 01 20 c7 a8 d7 c8 e6 ed 88 03 30 d0 f9 07 6a 0c 08 86 01 10 c7 a8 d7 c8 e6 ed 88 03 70 83 d4 06 Data Ascii: 1DCgR0Q6nyWw 0jp
2024-10-14 04:53:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:30 UTC	7	IN	Data Raw: 31 61 61 30 38 0d 0a Data Ascii: 1aa08
2024-10-14 04:53:30 UTC	5	IN	Data Raw: 15 c4 50 0d 00 Data Ascii: P
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 71 71 75 17 17 17 17 17 17 17 ef 85 22 e5 e2 e2 e5 e2 e1 58 24 17 8b 8b 8b 88 a8 2f 52 f1 7f e1 92 41 06 97 f5 4e ae 76 34 76 2a ca a0 82 5e f8 65 cd ff d8 1f e7 a3 b0 ca 80 15 6e f9 77 4e ba 35 f8 f1 07 f1 cc 8c 93 af 85 22 26 25 ea 2e 2e 2e 2e 2e 5e 2e 2e 2e 2e 2e 2e 2f d8 59 c0 4c fd 9f ef af fe cf 7e 15 50 95 2a 5f bd 1f ba 3c 2c e0 5f 79 3f d1 69 fc d8 ff fd 89 c3 1e 5b 97 27 d6 a3 94 85 5c 25 f0 73 ff f6 5c 2a e1 32 84 e5 ff 62 65 5a e1 57 0c ad f7 ec bd 7e 15 70 93 13 f3 a1 e1 ab 79 c0 fd 1c bf 0a ba 40 68 eb fb ff 0d 12 11 7f fa 9c 8a ff bf e5 85 55 8d d7 d8 a8 94 90 96 5e 13 24 08 de c7 66 3b 4d f5 2d 3f 85 54 33 13 49 29 f0 c5 b8 d1 21 22 e3 a4 8b dd e3 25 e2 e2 ea 2e 2e 2e a5 e2 e5 e2 e2 ea 2e 2f 0c b8 09 1b eb af 3d 6c fb f6 40 21 6b e9 e9 b0 Data Ascii: qqu"X$/RANv4v^enwN5"&%.....^....../YL~P_<,_y?i['\%s\*2beZW~py@hU^$f;M-?T3I)!"%..../=l@!k
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 21 aa 56 27 3c 3d a1 27 44 21 76 ae 84 36 8d e2 16 34 d4 ca b6 b0 b2 65 8f 0c dc a2 18 41 f1 21 4c 3d f0 8f 33 bf db 97 fc eb 0a 23 cb 05 86 a0 84 88 2e 40 38 10 f5 1e 0a 85 d2 3c 40 15 f6 80 6e 93 d9 0f 54 2d 58 78 65 86 4e 16 47 86 45 71 17 31 d0 65 26 5b 63 67 16 1f 22 03 1d 70 90 45 04 50 29 68 36 81 1b e6 47 de cf 01 c3 cd f2 20 2e 8d 48 b1 43 f2 6b 26 18 96 65 9b 1f d3 cb e7 5f 8d 95 9c 39 0c a2 c3 2c de 0e 1e 19 21 f2 00 c8 75 21 66 59 88 34 2c cf c0 b3 2f 63 f4 f9 7f fc 69 cc e1 0d 19 30 06 c4 79 96 66 52 0e e1 7c 88 09 61 92 04 b8 4b 31 01 60 49 50 8c 20 50 13 93 22 16 11 de 41 d8 40 80 6c 01 7f 87 be 9f f0 a3 38 88 09 66 88 08 71 06 d2 1d 44 50 c2 c4 00 10 d2 40 bb 85 f0 98 d9 08 05 0f 90 40 1b 60 45 e0 9c 13 13 c3 27 30 01 2e c8 0f d1 50 44 5a Data Ascii: !V'<='D!v64eA!L=3#.@8<@nT-XxeNGEq1e&[cg"pEP)h6G .HCk&e_9,!u!fY4,/ci0yfR\|aK1`IP P"A@l8fqDP@@`E'0.PDZ
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 0d ab 1c 90 af 29 2d 40 97 99 11 78 82 74 0c 9e 25 d1 12 a2 e4 49 bd 2d 60 29 eb 37 ff fb 7d a1 f3 98 49 01 e5 df 1c 1f 40 87 00 a0 27 31 60 68 6a d5 41 1b b0 22 0c 99 be d6 c2 b6 cd f2 fd bc 00 88 86 5c 00 7c ea 66 a6 2f f8 1e 32 1b f6 b3 5c 09 10 86 f4 1d 24 ae 1f 70 60 ae 85 5b 04 35 9a 5b 74 52 10 d6 52 f8 36 23 d4 40 64 3c 7c 25 db 61 97 00 e0 6d b1 57 c1 2f f5 3a 51 0c 66 8c 19 59 f7 6a 22 c8 40 da af f4 42 6c 60 83 4f cb 10 6a 31 db 7a be be 3f 06 48 41 d6 58 8f a4 5d cc 13 0a 5f 08 ee 96 b6 9b bb 47 48 d1 27 24 18 0f 13 80 9f 45 46 1d b0 d2 84 3f 12 2d f8 77 d9 f6 15 8d 84 b4 a7 78 b1 4e 12 32 a5 62 37 a1 f9 cb cf 2e c9 a4 42 d8 63 0e c7 34 17 1f 5a d8 20 0b b1 4c ba ff 92 a5 77 a1 24 91 e6 6b 95 6a 0b 55 19 a5 c3 2e 01 5f b4 b6 a7 7f ba cd 83 43 Data Ascii: )-@xt%I-`)7}I@'1`hjA"\\|f/2\$p`[5[tRR6#@d<\|%amW/:QfYj"@Bl`Oj1z?HAX]_GH'$EF?-wxN2b7.Bc4Z Lw$kjU._C
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 5e 2e 2e 2e 2e 2e 26 18 09 78 b8 52 00 c1 72 fe cb ff e1 48 b8 6c ef 02 ec 60 bc 4c 30 12 f2 f9 2f 17 17 17 17 17 17 ff c2 92 f1 71 71 34 82 e2 e5 e2 e2 e7 52 0b 97 97 8b 8b 8b ff e1 48 b8 b8 ba 8b 8b 8b 8b 8b 8b 8b 8b 8b 8b 8b 8b ff 09 b8 0c da 6f d7 9e b6 5e ca a9 27 17 46 c4 4f 0c a8 04 5e 9a 72 f1 69 9e 10 d1 a2 66 8b 76 f5 fb 0a a8 22 74 f9 d9 59 d5 c7 11 4b fa 2a 68 73 7f ff a7 ac ac 0b d7 27 c7 7b 08 87 ac 5c 08 03 ac fb 0b 38 00 cf a5 d9 43 65 27 3c dc a3 9c 45 0a 7e 33 a3 14 d0 fc 13 00 b2 c2 a4 9a dd 84 0f ef 5a 3e cd 38 67 00 85 aa cf 7e df d4 aa 65 49 6f 61 4b 79 61 95 02 27 98 0d 4e 6a 15 27 a2 72 ea d1 36 47 a2 c3 8b 0c a8 10 2a 40 7a f0 38 89 9f c6 ca c9 d2 32 96 bd 9d e8 79 7c 64 ea 81 72 f1 71 71 71 71 10 c0 45 c5 c4 d8 2f 17 2f 17 17 85 Data Ascii: ^.....&xRrHl`L0/qq4RHo^'FO^rifv"tYKhs'{\8Ce'<E~3Z>8g~eIoaKya'Nj'r6G@z82y\|drqqqqE//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49907	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	1643	OUT	GET /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=140&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=audio/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=4327556&dur=267.331&lmt=1727806982613995&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIgdv0JU5Zm4rFaAMW1NZf0rNHRuYq9BnQsGN4mUY74STMCIQCTGwmHNiiSFfD38qVKtu8QANjiNqnUwOstPOqUYgENeA==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRQIhAKDH4iGVxsHI1PwUujmukPfcSXbuKxGV50S0FxkL9_ZRAiAaj22437gpzERsBjvgLK3Y6UMn2cWmCsSN5IoJ210QYg==&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=0-66614&rn=2&rbuf=0&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:30 UTC	446	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:23:02 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:30 GMT Expires: Mon, 14 Oct 2024 04:53:30 GMT Cache-Control: private, max-age=10495 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:30 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-10-14 04:53:30 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 8c 01 20 eb d7 c1 cb e6 ed 88 03 30 00 6a 0c 08 8c 01 10 eb d7 c1 cb e6 ed 88 03 70 b7 88 04 Data Ascii: /DCgR0Q6nyWw 0jp
2024-10-14 04:53:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:30 UTC	7	IN	Data Raw: 31 30 34 33 63 0d 0a Data Ascii: 1043c
2024-10-14 04:53:30 UTC	5	IN	Data Raw: 15 d8 21 08 00 Data Ascii: !
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 00 00 00 18 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 6d 70 34 31 00 00 02 bb 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e3 21 ee 78 e3 21 ee 78 00 00 ac 44 00 b3 e4 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c4 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e3 21 ee 78 e3 21 ee 78 00 00 00 01 00 00 00 00 00 b3 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 Data Ascii: ftypdashiso6mp41moovlmvhd!x!xD@(mvex trextrak\tkhd!x!x
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 9b 8f b0 62 67 b0 ca 56 38 72 7a dd 0a 18 3f 34 cf 58 4e 1f ac 38 75 59 a4 a0 2c 1d 83 b3 7e 77 40 e6 de 71 59 e5 3a fd 90 3e 27 a0 6b 3d e2 df 92 e7 1f f7 7f 57 fa 1a 9f 9e ed bb 0d 8f ba c6 d0 2e fd e8 fd d4 df 1e d0 97 ff 6d 57 34 cb f9 ee 35 f4 f9 46 92 ff 62 f9 60 32 a7 30 5e 83 2e f3 e0 34 3b 27 1e b2 47 fa 54 fd a4 17 b7 19 8d 9d 8d c1 d7 1a 65 b7 3f 50 38 b0 f9 ae 8a 87 ae ec 74 5f 2d a9 ba b4 4e b0 ab d4 4c e3 51 76 95 8e 21 67 1d de 77 dd 82 cd b1 6b 5e 1e 25 f6 df 60 c8 e7 39 ed b7 41 ae d8 72 87 f1 5e 6f ad dc 33 7c ea 79 c6 8f 7d 7d 4f 9b 3f 64 ac 56 6c 01 4a d6 bf 2d 3c dd 35 6d 89 99 d4 0c e0 e5 57 49 02 07 12 da 4b ab 6f 57 a1 ef 95 2d 22 7a b4 d9 d1 3b cc 3a 8a b9 38 67 2d 8f 29 ac 42 9c 5c df ef 8a 63 ab 12 01 40 1f 58 dc 00 00 00 00 00 Data Ascii: bgV8rz?4XN8uY,~w@qY:>'k=W.mW45Fb`20^.4;'GTe?P8t_-NLQv!gwk^%`9Ar^o3\|y}}O?dVlJ-<5mWIKoW-"z;:8g-)B\c@X
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: e3 58 77 78 bd f6 cc 83 77 7f 43 f9 7e 27 c6 5f 78 e3 1c 5f c0 ec 5f 95 94 c0 f6 cf 63 93 9f de 34 07 49 9a c1 d8 ba cc 84 1a 1b 73 de 26 66 1a b3 d5 76 3e e9 c8 f9 75 94 cd b2 d7 09 41 be e5 52 16 5c 02 54 b0 9d 6f 3c a9 51 d1 33 e0 0a 75 63 bc dd ab 79 ca ba 4f 14 bd a2 d1 18 84 47 24 fe 2b da 58 b5 af af 7d 47 aa bc e7 cd a8 6f 4b f5 8a bd 25 30 aa a7 e8 b2 bc 4d 5a b1 0a 16 43 2b cb 3e d7 71 d7 bc 6c cb f5 fa b7 0a ab e3 f3 2c a5 c0 33 1b aa 94 b0 66 27 6c 27 23 52 f9 21 d7 8a 69 3c a1 51 64 31 83 2e 8d c1 35 86 81 2c 94 53 d7 23 5e 28 e8 0c 31 ce fa 44 88 4e 97 2d 3d 72 9a 80 b6 4a c0 24 37 7d 72 30 af 85 02 48 df 1c ff 0f 16 20 a0 0f ac 69 00 00 00 00 00 00 00 00 00 f8 21 1a 94 3d ea 94 61 02 80 46 52 6a f1 16 c3 ad ea f1 72 d3 91 8f 51 26 2f a0 9f Data Ascii: XwxwC~'_x__c4Is&fv>uAR\To<Q3ucyOG$+X}GoK%0MZC+>ql,3f'l'#R!i<Qd1.5,S#^(1DN-=rJ$7}r0H i!=aFRjrQ&/
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: ed 8e dd df 74 2a af 54 53 d0 db 04 c9 eb 4d 7c ce f0 cc 43 71 6d 3d 9e ac ad 11 c5 bf 13 df db 4a e5 73 3a ba 0a 9d f4 97 6f 37 57 b0 bb 6b 8a ac 1d 37 6d cf 34 d5 7a c2 f9 c5 68 70 fb 0e 0a bc ff d5 54 9a 7a bb 9d 5f 8a a6 15 d9 cd 60 36 3a b7 32 b1 bb b7 d2 c8 c3 5a 38 16 d4 ef fd 04 ac 15 8a ff 49 82 ea d2 03 c2 c9 07 43 6c 6d af 3f e8 9f ac 78 5d 76 58 d1 c9 c8 d3 21 03 71 82 72 f7 54 1c 51 af 53 e4 4a 29 30 53 85 63 cc 49 39 6c 4e 36 27 d4 50 12 b3 04 b0 24 d8 50 ee 66 e6 2a 8d aa 55 a2 77 ff ed 00 50 07 d6 37 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 21 1a 94 1d ee 90 e2 02 98 b2 93 59 a5 82 f1 5a 89 ac 92 5c cc 14 5c 62 25 06 a9 df fc a7 97 3a ca 4a bc f3 e7 65 ac db 5a 6b 72 f2 87 32 d9 1d 1f 47 d3 93 0b ea 91 f8 6c bb bf ef 8f 0f c7 e1 c2 Data Ascii: tTSM\|Cqm=Js:o7Wk7m4zhpTz_`6:2Z8IClm?x]vX!qrTQSJ)0ScI9lN6'P$PfUwP7!YZ\\b%:JeZkr2Gl
2024-10-14 04:53:31 UTC	1079	IN	Data Raw: 08 ca b8 d1 9e 99 10 68 c1 a4 15 2e d3 48 5e a0 01 35 68 31 58 e6 06 60 18 91 be 78 5a 07 16 12 bb be 2a 35 97 17 4d 00 5c dd 68 2c a4 aa f0 35 c0 a7 68 21 91 c4 f8 eb db 8c 2b ca a8 54 a0 01 8b fb 0e 73 9f 40 eb 47 1f 1b df f1 17 eb d8 f1 97 af a4 19 f0 7f 61 df b6 b9 d2 a5 76 29 37 e9 58 bd be e5 a0 8e a1 4f 1d 5e 36 f3 55 fd 17 be 85 17 d6 33 42 35 b8 17 23 1c f7 8a ae 9b 60 88 63 84 31 1a d2 2e 5d e6 61 3a ad 90 9b fd 8e 98 a3 ee a1 ee 13 89 3e 49 2f 84 48 5c 00 4f af 8d b5 3a 07 20 8a 69 7a 00 0a 40 01 9a 07 21 1a 94 e5 9a 99 23 81 b1 54 44 36 09 04 48 02 45 27 b3 d7 5c c1 03 80 24 a8 2e 80 67 bd 9e 40 e1 f9 1f 0e b3 43 2a 02 5d 1e ee 6b c8 9d f3 89 50 b6 bb 53 db a3 dd 00 8f d1 7c 2f 3f 57 66 61 95 17 54 87 11 13 4e e2 c3 e6 06 9f 68 5f ae 13 f5 07 Data Ascii: h.H^5h1X`xZ5M\h,5h!+Ts@Gav)7XO^6U3B5#`c1.]a:>I/H\O: iz@!#TD6HE'\$.g@C]kPS\|/?WfaTNh_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49908	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	1641	OUT	GET /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=134&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=video/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=13215778&dur=267.267&lmt=1727806976676935&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIhAPRyiGN60jr25qc4R2s3bbFkfa2QoKIATH1QMdCgz1AOAiBSP7yWw6jzfwNhZfztsbZGgoomXd8cEIbzGsEgm-r2xQ==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRAIgcDmFN4FfWXXwqY9XQFmsWxnvzpqFb0gQLbHDlkRC1YYCIC8lgdmvfSskVHNYAJw9ItWlggFgpC5jAk2dHGZugpss&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=0-130255&rn=1&rbuf=0&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:30 UTC	446	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:22:56 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:30 GMT Expires: Mon, 14 Oct 2024 04:53:30 GMT Cache-Control: private, max-age=10495 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:30 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-10-14 04:53:30 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 86 01 20 c7 a8 d7 c8 e6 ed 88 03 30 00 6a 0c 08 86 01 10 c7 a8 d7 c8 e6 ed 88 03 70 d0 f9 07 Data Ascii: /DCgR0Q6nyWw 0jp
2024-10-14 04:53:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:30 UTC	7	IN	Data Raw: 31 66 63 64 35 0d 0a Data Ascii: 1fcd5
2024-10-14 04:53:30 UTC	5	IN	Data Raw: 15 d1 e6 0f 00 Data Ascii:
2024-10-14 04:53:30 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 63 31 6d 70 34 31 00 00 02 a2 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e3 21 ee 78 e3 21 ee 78 00 00 5d c0 00 61 e0 48 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 06 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e3 21 ee 78 e3 21 ee 78 00 00 00 01 00 00 00 00 00 61 e0 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6avc1mp41moovlmvhd!x!x]aH@(mvex trextrak\tkhd!x!xaH
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 74 f7 c2 a4 80 bb 91 0d 19 5b f4 ff f3 5f 0e 1f d1 59 71 fe fb df 12 b8 97 c6 bf b1 2f 89 7c 4b e2 5f 12 f8 d7 f6 35 c6 0c 36 25 f1 2f 89 7c 4b e2 5f 12 f8 97 c4 be 25 f1 2f 89 7c 2a eb ff f6 f9 83 ff 55 e8 33 2d 1c 47 3e ed 89 24 d4 c8 01 a5 f8 2c 59 30 5d de f7 ab e2 5b 17 89 7c 4b e6 0f ff bb b0 49 e5 ca cd ff 7c 3b 04 cb 97 0b 9e 1a 6c 34 8f 4f 4f ff ae 12 01 07 f0 8a ef a9 b3 13 c1 4e 19 70 88 98 6f eb fd b6 e9 e9 df 30 6f 77 df f2 09 e2 79 53 63 b7 04 39 f0 64 06 70 4a cb d9 9e 7b e3 15 5f 12 a2 b8 97 c4 3e 25 de 25 f1 2f 89 7c 4b e2 5f 12 f8 97 c2 a4 86 e4 c5 ff ff 89 77 8d 7f 63 5f d8 d7 f6 35 fd 89 7c 4b e2 5f 12 f8 97 c4 be 25 c5 78 22 00 de 82 2a 8b ef f0 55 5a ab b9 b3 ae ff 19 dd eb aa c9 98 ba a3 04 3e 1f d8 57 97 05 6e 2b 7c 28 d0 60 42 0c Data Ascii: t[_Yq/\|K_56%/\|K_%/\|U3-G>$,Y0][\|KI\|;l4OONpo0owySc9dpJ{_>%%/\|K_wc_5\|K_%x"UZ>Wn+\|(`B
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 0c d5 ce 88 a6 f8 fd f7 a4 aa 36 30 8c 4e c8 0e 83 2e 2f c0 e5 66 6f 45 14 5f cc be 4f e3 22 ea 5e 23 82 e2 e5 e2 e2 e5 e2 e2 e2 e2 e2 e2 f3 7f e1 f4 ab 9e 94 ad 3e ab aa b1 9b fe 10 f4 a5 20 fa 51 d6 5f 49 ee 21 c2 66 ac b3 7f ea f8 53 fb cb 4a d7 de 2b 85 14 21 f2 60 7b eb 81 20 b2 99 ae dd 34 da f9 87 f8 03 c7 a4 ed 3b 36 6f 88 7d ab 4f 12 e3 4e 66 f2 97 7f a4 b2 e2 ad db aa cd 9f 16 64 ff fe 95 b7 7d ae 6c c9 89 2b a6 50 bb 60 4c fc 03 af 34 c7 0c 36 dc 69 ff eb 8f 07 03 2a a2 e2 e6 cc bd 45 c2 b8 c1 27 c9 78 ba ac 34 a1 3b 1b 6d ff fd f1 0a 7a 4c 1f c3 fb 34 93 35 24 c3 a6 2a 3d cd f6 33 0f 1f fe 85 27 e3 f2 2f ad df 86 14 73 df da ff 48 a6 1f f8 7d 3e 35 ed fe 95 55 2a c3 0a 04 40 fc 66 13 f4 db 6f e7 dd cf 8c 97 8b 8b 8b 97 8b 8b 8b c8 ba a8 b8 ba Data Ascii: 60N./foE_O"^#> Q_I!fSJ+!`{ 4;6o}ONfd}l+P`L46iE'x4;mzL45$=3'/sH}>5U*@fo
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 1f ff e9 4d 47 de e9 da 8c fe 7d b2 c9 4a a4 c9 6d e8 db 37 ff fa 59 7e 4f 3e 7a 75 50 37 dd df 86 a3 99 80 3f ff 57 d5 ff 53 4f cd 47 d4 34 c8 a8 cb fb 73 7f ff a7 79 05 06 5a 5a 41 e1 a3 56 7c b5 46 62 0b 69 37 ff fa 7c b4 25 a0 6f fa b5 d0 39 bf ff d0 9e 33 ea 0d c9 89 26 65 ad 58 37 9b ff fc 86 de 99 af 67 73 de d9 bf ff d2 d1 94 8e 81 b3 29 12 ad e7 e3 fb 69 be 6f ff f4 a7 20 b9 f2 0c d8 3e a1 2e ab 40 f5 1e 3e 47 76 cd ff fe 9d d8 fa 7b 59 31 9f 35 ad a9 7f fc 64 4f 0b 31 4c 53 0a 9f 17 96 62 98 a6 29 8b 8a 62 98 a6 22 41 2f f0 a2 13 c2 f2 f1 21 a0 b8 b9 7c cc 17 97 a8 b8 ba 8b f6 5f c3 8b 16 2c 14 c7 23 0c 95 89 98 7e 7e 5e 31 e3 cf 95 52 77 65 ff 30 d2 21 91 75 2f 50 b1 94 ca 17 ca ac dd 55 86 33 91 0c 67 9e 5f 21 69 94 c9 78 d6 43 1c b9 30 ec 3a Data Ascii: MG}Jm7Y~O>zuP7?WSOG4syZZAV\|Fbi7\|%o93&eX7gs)io >.@>Gv{Y15dO1LSb)b"A/!\|_,#~~^1Rwe0!u/PU3g_!ixC0:
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 0b a3 27 f4 1f fc c1 ff fc 85 f7 2f 10 e5 73 57 b9 86 54 12 e9 e9 9a ff f6 f4 aa 18 70 26 67 9f 3c bf d3 16 d9 53 62 d3 28 65 c3 90 4a af f6 b5 b0 d3 db 0c b8 75 7f 43 5e 2f 22 54 d8 7f b9 8d 52 a4 63 0c 28 40 e2 4d ff 72 5e 97 ce 95 f3 2c 1d 4d d7 e3 aa d0 61 ca 42 58 b2 68 db 23 97 78 23 36 a6 12 e4 29 b2 2b d5 89 d5 03 f5 e4 d7 6f 30 2a f5 7a fc f5 33 3a d3 76 91 d5 39 6f 97 6f 14 a8 35 7c ec 2f 54 a7 30 b6 da dd bf c2 de 02 23 9c e1 15 15 96 ba a8 57 25 1a 4d 25 dc e4 82 27 d6 dc be 5f ff 0a 4e 0e 18 21 2b c4 c4 b2 b1 d1 c5 61 2f 42 50 ab 93 71 e3 43 2a 57 20 1c 3a 02 b7 cb 2a c1 c3 4a 13 97 02 3f 35 c7 1c e3 f5 76 d4 8c 6a 5f 20 9a b5 38 01 b5 78 1a fd 23 b1 8d ea 61 b6 b1 3b d3 a6 63 cb fb 77 25 15 ec 03 c9 8a 35 32 d8 e1 41 d9 52 d6 5e 24 7f cd 10 Data Ascii: '/sWTp&g<Sb(eJuC^/"TRc(@Mr^,MaBXh#x#6)+o0z3:v9oo5\|/T0#W%M%'_N!+a/BPqCW :*J?5vj_ 8x#a;cw%52AR^$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49906	142.250.186.46	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	648	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 14 Oct 2024 04:53:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:31 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-14 04:53:31 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49905	142.250.184.238	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:30 UTC	757	OUT	GET /file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/docos/p/sync?resourcekey&id=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:32 UTC	862	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/html; charset=utf-8 Content-Security-Policy: script-src 'report-sample' 'nonce-djZ1wHKd64O2Lon2P0lAvw' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Referrer-Policy: strict-origin-when-cross-origin Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:32 UTC	528	IN	Data Raw: 62 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bdb<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-10-14 04:53:32 UTC	1390	IN	Data Raw: 4a 5a 75 41 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 67 68 62 4f 50 48 41 52 6d 74 68 56 54 65 76 37 74 66 4a 5a 75 41 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2a 20 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 23 64 72 69 76 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 31 38 70 78 20 30 3b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: JZuA"><style nonce="ghbOPHARmthVTev7tfJZuA">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}#drive-logo{margin:18px 0;position:
2024-10-14 04:53:32 UTC	1124	IN	Data Raw: 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 38 30 70 78 3b 22 3e 3c 64 69 76 20 69 64 3d 22 64 72 69 76 65 2d 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 69 6d 67 22 20 74 69 74 6c 65 3d 22 47 6f 6f 67 6c 65 20 6c 6f 67 6f 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 74 65 78 74 22 3e 26 6e 62 73 70 3b 44 72 69 76 65 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 61 6c 69 67 Data Ascii: uterContainer"><div id="innerContainer"><div style="position: absolute; top: -80px;"><div id="drive-logo"><a href="/"><span class="docs-drivelogo-img" title="Google logo"></span><span class="docs-drivelogo-text"> Drive</span></a></div></div><div alig
2024-10-14 04:53:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49910	142.250.185.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	1198	OUT	GET /timedtext?id=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&vid=0c2811d10ea7c96c&authpayload=ASH5dRmXCHhTODr0jIskuL9KQTx0eokai7Yrt7lwcDsDtjQkQ0mNAz1zGrY231MM7R7RUuGAHc8gph85UnNQO---7HkVk_8c7co8Eq3xNnzgHWUCL2JjV_IJUHgbiiF2_Tz9&hl=en-US&type=list&tlangs=1&v=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&vssids=1 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:31 UTC	2017	IN	HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 04:53:31 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://youtube.googleapis.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: X-GoogApps-Allowed-Domains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveTimedTextTrackHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-kEHAbM-J2tX6e8zV1Q5MDQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveTimedTextTrackHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveTimedTextTrackHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/DriveTimedTextTrackHttp/web-reports?context=eJzj0tDikmLw1ZBicEqfwRoExKt_nmNdD8R7Np1nPQDEf2QusTLIXmIV4uE4fXzTDjaBHz0nvjIpqSblF8anFGWWpWaUlBQkFmQWpxaVpRbFGxkYmRgaGBjrGRjFFxgAALiuI5E" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:31 UTC	107	IN	Data Raw: 36 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 74 72 61 6e 73 63 72 69 70 74 5f 6c 69 73 74 20 64 6f 63 69 64 3d 22 38 37 35 39 36 39 37 31 37 31 31 35 32 37 35 36 32 38 22 3e 3c 2f 74 72 61 6e 73 63 72 69 70 74 5f 6c 69 73 74 3e 0d 0a Data Ascii: 65<?xml version="1.0" encoding="utf-8" ?><transcript_list docid="875969717115275628"></transcript_list>
2024-10-14 04:53:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49911	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045331Z-17db6f7c8cfnqpbkckdefmqa440000000600000000002cp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 2ae1a5cc-001e-0046-231b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045331Z-17db6f7c8cfvtw4hh2496wp8p800000004d0000000003mu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045331Z-17db6f7c8cfbd7pgux3k6qfa6000000004wg000000001tc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49915	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:31 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045331Z-17db6f7c8cf6f7vv3recfp4a6w00000003200000000017cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 76e86a3b-101e-0046-5a47-1c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045331Z-17db6f7c8cfmhggkx889x958tc000000031g00000000afzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49916	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	1937	OUT	POST /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=140&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=audio/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=4327556&dur=267.331&lmt=1727806982613995&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIgdv0JU5Zm4rFaAMW1NZf0rNHRuYq9BnQsGN4mUY74STMCIQCTGwmHNiiSFfD38qVKtu8QANjiNqnUwOstPOqUYgENeA==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRQIhAKDH4iGVxsHI1PwUujmukPfcSXbuKxGV50S0FxkL9_ZRAiAaj22437gpzERsBjvgLK3Y6UMn2cWmCsSN5IoJ210QYg==&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=66615-132150&rn=4&rbuf=4039&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:31 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-10-14 04:53:31 UTC	964	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:23:02 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:31 GMT Expires: Mon, 14 Oct 2024 04:53:31 GMT Cache-Control: private, max-age=10494 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://youtube.googleapis.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://youtube.googleapis.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:31 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-10-14 04:53:31 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 8c 01 20 eb d7 c1 cb e6 ed 88 03 30 b7 88 04 6a 0c 08 8c 01 10 eb d7 c1 cb e6 ed 88 03 70 80 80 04 Data Ascii: 1DCgR0Q6nyWw 0jp
2024-10-14 04:53:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:31 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-10-14 04:53:31 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 38 fd 3a 5f b0 63 17 7c 52 23 55 b0 cf 7d cc 00 75 89 a9 c2 9b 16 9e 83 15 5c 51 4a 90 52 e8 44 d1 f3 b4 19 58 8d 2a d4 f6 96 d0 11 50 89 53 40 0d 9b e7 9c c8 a0 22 c9 5a 4a 95 e6 7a 5f 15 6e fb 91 3c 40 b4 4d 92 cb fe 9d be 36 b0 82 74 08 ea ee 08 ee 40 02 72 89 09 52 21 58 28 33 40 0c 46 02 02 36 70 29 a2 9a aa d6 2c 5f 3c 20 f4 cc 7e 4e 73 56 57 50 ae 2d eb d5 e3 86 1a a5 1c 44 99 c4 5f 49 34 4a 01 3b 25 81 d4 fa f8 70 8d f3 d8 54 f6 57 db 36 75 0a 53 d6 e2 8e e6 92 76 98 8b 0c 22 59 d9 2c ee d5 67 ba d7 3b 67 ab e6 63 b5 7a d0 d1 04 a3 eb 75 b8 7a cc 3c aa 4b e1 79 47 d1 12 da 4b 16 34 e0 01 3d 0e 54 b7 b0 02 70 14 82 fb 54 f2 81 af 53 d1 97 02 5e ff 21 0a 94 c5 92 98 c4 42 a8 90 ac 91 08 2b 54 11 85 d1 20 cb ba 95 15 aa a9 2b 07 f7 49 49 9b 3a cc ad Data Ascii: 8:_c\|R#U}u\QJRDX*PS@"ZJz_n<@M6t@rR!X(3@F6p),_< ~NsVWP-D_I4J;%pTW6uSv"Y,g;gczuz<KyGK4=TpTS^!B+T +II:
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 82 d2 d3 85 36 e9 6d c9 84 f1 a6 57 19 e3 d7 41 59 4f 5d a3 09 57 c0 63 71 8d 39 dd 0c 98 ab bc ab 15 ad f4 e5 b2 72 b4 a4 57 7b a4 b7 2a c7 db 98 c4 6a f4 85 62 20 10 b4 66 04 f4 a2 95 18 95 06 fb 2e 55 78 98 5e 4a b1 15 18 c6 17 0b c3 be 73 17 8b f6 ea d5 98 ef f5 71 cb 2c 77 fc f4 13 13 72 34 62 59 01 61 f6 39 e1 b5 59 59 4f 7a 89 68 78 20 9c 36 56 45 4d 64 68 99 5f 43 04 20 ea 8b 09 f3 d2 77 83 f1 06 0a b3 14 fd c2 54 66 51 01 04 80 00 00 00 d5 e4 5e 01 b3 70 7c 4b 0e 7b 7e 54 80 8e 58 7c 16 fe 50 e8 b7 a9 40 02 a7 45 c5 cb 99 df ca 14 6f 2a cd ac 20 8f 4e 57 92 71 c0 a8 90 16 0d eb cc 13 e7 bc 2c f0 27 0f 89 cd 68 d6 80 21 21 c8 e6 02 fa 6c 48 5f f3 bc 7b 15 7c c2 19 6e fd 8b 4a 53 8c 3d a7 47 10 35 04 80 0a 8e 9a 3c ab 4e 74 0c 47 4a 89 5e ca 05 f1 Data Ascii: 6mWAYO]Wcq9rW{jb f.Ux^Jsq,wr4bYa9YYOzhx 6VEMdh_C wTfQ^p\|K{~TX\|P@Eo NWq,'h!!lH_{\|nJS=G5<NtGJ^
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: c9 5c 49 c8 ae f3 47 0b d4 c4 82 34 ba ac 10 77 8d 2b b2 bd 9e bd e7 90 89 5e 20 f4 e3 96 a6 09 31 7c 26 b9 a6 ef 76 9f c6 f5 f7 bc eb 1f c4 ac 73 2d 6d ae 1c 67 7b ab a8 96 93 87 9d eb 9e c7 79 b2 78 dd f9 f5 a6 31 cd 98 39 da 00 9f b3 c1 6c 4a 83 50 0c 4a 02 1c 1a dd 50 2c 30 68 11 45 e0 55 bd b5 94 49 dd 07 d8 b2 08 ff 8e d8 c1 42 b7 ba 84 9e f5 b3 27 52 81 ce 67 1c 66 e5 87 d2 c0 c2 ae 6c 0d 37 35 ca 59 d5 45 80 ae 5d f8 b9 8c 7a 22 0d 7e a9 dc 5f 7f 63 38 6a 25 fa 14 ff be c5 0b f0 f3 13 ce 54 4b 8c 04 bb 84 a4 65 00 9f 45 87 13 68 c2 65 f2 ba ac a0 f6 ec 00 31 bf 00 3d f7 66 f3 7f 5d 8b a8 39 21 0a 94 d5 b6 56 85 22 a1 c0 21 10 a3 37 11 77 54 b2 c1 09 4b c0 9d d3 33 db 23 88 c4 92 25 1a de 5c 9d 57 02 1f 46 28 78 8e f0 c8 34 33 15 ea e6 6a 84 cb 10 Data Ascii: \IG4w+^ 1\|&vs-mg{yx19lJPJP,0hEUIB'Rgfl75YE]z"~_c8j%TKeEhe1=f]9!V"!7wTK3#%\WF(x43j
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: ff a5 a6 0c 27 58 3c a9 3e 50 64 de c8 e6 bb 63 7e ce 5a a8 c8 df fb ff 5b 88 8b de 38 95 fb e0 1b 76 4a 6c 2a cb 17 4d 5e 2f 4e 71 88 05 3f be 03 5f 26 80 65 f0 89 f0 00 06 c4 a7 20 30 05 e7 ea 4e f6 16 d6 0c f0 23 3f 21 0a 94 f5 c2 4e 8a 62 20 c4 48 6c d7 c1 40 1c 73 70 b3 2f 1a 25 00 e4 5e b4 b5 45 61 f3 34 be 1c 7a 8e f4 93 02 8d 8f 1f 1a 6e 7d 9f 08 95 27 ee e4 92 56 dc c7 c7 43 d5 a7 67 72 7e 82 4f b9 38 0b 40 8c 7a b8 b0 12 8e 84 ab bc ce 1f 06 5c 2c 93 f3 7b 01 8a b1 71 ea a2 2e e1 3a 37 34 67 1c e9 9d 88 93 ac 40 8a da d8 d7 c2 9a 99 bf 90 3e b5 d2 1e 75 02 55 5a 1a 83 e6 89 4b e3 04 26 7a aa e6 dd 2d 69 45 9b 43 25 99 ca 54 d7 b1 78 6b c1 92 dd 02 0a 7f 2b 3c ad be 07 76 4f 7d eb d6 b6 9a 59 32 62 6f 0b 03 12 58 30 98 89 a7 75 ae 04 94 5a 75 84 Data Ascii: 'X<>Pdc~Z[8vJl*M^/Nq?_&e 0N#?!Nb Hl@sp/%^Ea4zn}'VCgr~O8@z\,{q.:74g@>uUZK&z-iEC%Txk+<vO}Y2boX0uZu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49917	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:31 UTC	1649	OUT	GET /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=134&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=video/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=13215778&dur=267.267&lmt=1727806976676935&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIhAPRyiGN60jr25qc4R2s3bbFkfa2QoKIATH1QMdCgz1AOAiBSP7yWw6jzfwNhZfztsbZGgoomXd8cEIbzGsEgm-r2xQ==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRAIgcDmFN4FfWXXwqY9XQFmsWxnvzpqFb0gQLbHDlkRC1YYCIC8lgdmvfSskVHNYAJw9ItWlggFgpC5jAk2dHGZugpss&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=130256-239314&rn=3&rbuf=2711&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:31 UTC	446	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:22:56 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:31 GMT Expires: Mon, 14 Oct 2024 04:53:31 GMT Cache-Control: private, max-age=10494 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:31 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-10-14 04:53:31 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 86 01 20 c7 a8 d7 c8 e6 ed 88 03 30 d0 f9 07 6a 0c 08 86 01 10 c7 a8 d7 c8 e6 ed 88 03 70 83 d4 06 Data Ascii: 1DCgR0Q6nyWw 0jp
2024-10-14 04:53:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:31 UTC	7	IN	Data Raw: 31 61 61 30 38 0d 0a Data Ascii: 1aa08
2024-10-14 04:53:31 UTC	5	IN	Data Raw: 15 c4 50 0d 00 Data Ascii: P
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 71 71 75 17 17 17 17 17 17 17 ef 85 22 e5 e2 e2 e5 e2 e1 58 24 17 8b 8b 8b 88 a8 2f 52 f1 7f e1 92 41 06 97 f5 4e ae 76 34 76 2a ca a0 82 5e f8 65 cd ff d8 1f e7 a3 b0 ca 80 15 6e f9 77 4e ba 35 f8 f1 07 f1 cc 8c 93 af 85 22 26 25 ea 2e 2e 2e 2e 2e 5e 2e 2e 2e 2e 2e 2e 2f d8 59 c0 4c fd 9f ef af fe cf 7e 15 50 95 2a 5f bd 1f ba 3c 2c e0 5f 79 3f d1 69 fc d8 ff fd 89 c3 1e 5b 97 27 d6 a3 94 85 5c 25 f0 73 ff f6 5c 2a e1 32 84 e5 ff 62 65 5a e1 57 0c ad f7 ec bd 7e 15 70 93 13 f3 a1 e1 ab 79 c0 fd 1c bf 0a ba 40 68 eb fb ff 0d 12 11 7f fa 9c 8a ff bf e5 85 55 8d d7 d8 a8 94 90 96 5e 13 24 08 de c7 66 3b 4d f5 2d 3f 85 54 33 13 49 29 f0 c5 b8 d1 21 22 e3 a4 8b dd e3 25 e2 e2 ea 2e 2e 2e a5 e2 e5 e2 e2 ea 2e 2f 0c b8 09 1b eb af 3d 6c fb f6 40 21 6b e9 e9 b0 Data Ascii: qqu"X$/RANv4v^enwN5"&%.....^....../YL~P_<,_y?i['\%s\*2beZW~py@hU^$f;M-?T3I)!"%..../=l@!k
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 21 aa 56 27 3c 3d a1 27 44 21 76 ae 84 36 8d e2 16 34 d4 ca b6 b0 b2 65 8f 0c dc a2 18 41 f1 21 4c 3d f0 8f 33 bf db 97 fc eb 0a 23 cb 05 86 a0 84 88 2e 40 38 10 f5 1e 0a 85 d2 3c 40 15 f6 80 6e 93 d9 0f 54 2d 58 78 65 86 4e 16 47 86 45 71 17 31 d0 65 26 5b 63 67 16 1f 22 03 1d 70 90 45 04 50 29 68 36 81 1b e6 47 de cf 01 c3 cd f2 20 2e 8d 48 b1 43 f2 6b 26 18 96 65 9b 1f d3 cb e7 5f 8d 95 9c 39 0c a2 c3 2c de 0e 1e 19 21 f2 00 c8 75 21 66 59 88 34 2c cf c0 b3 2f 63 f4 f9 7f fc 69 cc e1 0d 19 30 06 c4 79 96 66 52 0e e1 7c 88 09 61 92 04 b8 4b 31 01 60 49 50 8c 20 50 13 93 22 16 11 de 41 d8 40 80 6c 01 7f 87 be 9f f0 a3 38 88 09 66 88 08 71 06 d2 1d 44 50 c2 c4 00 10 d2 40 bb 85 f0 98 d9 08 05 0f 90 40 1b 60 45 e0 9c 13 13 c3 27 30 01 2e c8 0f d1 50 44 5a Data Ascii: !V'<='D!v64eA!L=3#.@8<@nT-XxeNGEq1e&[cg"pEP)h6G .HCk&e_9,!u!fY4,/ci0yfR\|aK1`IP P"A@l8fqDP@@`E'0.PDZ
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 0d ab 1c 90 af 29 2d 40 97 99 11 78 82 74 0c 9e 25 d1 12 a2 e4 49 bd 2d 60 29 eb 37 ff fb 7d a1 f3 98 49 01 e5 df 1c 1f 40 87 00 a0 27 31 60 68 6a d5 41 1b b0 22 0c 99 be d6 c2 b6 cd f2 fd bc 00 88 86 5c 00 7c ea 66 a6 2f f8 1e 32 1b f6 b3 5c 09 10 86 f4 1d 24 ae 1f 70 60 ae 85 5b 04 35 9a 5b 74 52 10 d6 52 f8 36 23 d4 40 64 3c 7c 25 db 61 97 00 e0 6d b1 57 c1 2f f5 3a 51 0c 66 8c 19 59 f7 6a 22 c8 40 da af f4 42 6c 60 83 4f cb 10 6a 31 db 7a be be 3f 06 48 41 d6 58 8f a4 5d cc 13 0a 5f 08 ee 96 b6 9b bb 47 48 d1 27 24 18 0f 13 80 9f 45 46 1d b0 d2 84 3f 12 2d f8 77 d9 f6 15 8d 84 b4 a7 78 b1 4e 12 32 a5 62 37 a1 f9 cb cf 2e c9 a4 42 d8 63 0e c7 34 17 1f 5a d8 20 0b b1 4c ba ff 92 a5 77 a1 24 91 e6 6b 95 6a 0b 55 19 a5 c3 2e 01 5f b4 b6 a7 7f ba cd 83 43 Data Ascii: )-@xt%I-`)7}I@'1`hjA"\\|f/2\$p`[5[tRR6#@d<\|%amW/:QfYj"@Bl`Oj1z?HAX]_GH'$EF?-wxN2b7.Bc4Z Lw$kjU._C
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: 5e 2e 2e 2e 2e 2e 26 18 09 78 b8 52 00 c1 72 fe cb ff e1 48 b8 6c ef 02 ec 60 bc 4c 30 12 f2 f9 2f 17 17 17 17 17 17 ff c2 92 f1 71 71 34 82 e2 e5 e2 e2 e7 52 0b 97 97 8b 8b 8b ff e1 48 b8 b8 ba 8b 8b 8b 8b 8b 8b 8b 8b 8b 8b 8b 8b ff 09 b8 0c da 6f d7 9e b6 5e ca a9 27 17 46 c4 4f 0c a8 04 5e 9a 72 f1 69 9e 10 d1 a2 66 8b 76 f5 fb 0a a8 22 74 f9 d9 59 d5 c7 11 4b fa 2a 68 73 7f ff a7 ac ac 0b d7 27 c7 7b 08 87 ac 5c 08 03 ac fb 0b 38 00 cf a5 d9 43 65 27 3c dc a3 9c 45 0a 7e 33 a3 14 d0 fc 13 00 b2 c2 a4 9a dd 84 0f ef 5a 3e cd 38 67 00 85 aa cf 7e df d4 aa 65 49 6f 61 4b 79 61 95 02 27 98 0d 4e 6a 15 27 a2 72 ea d1 36 47 a2 c3 8b 0c a8 10 2a 40 7a f0 38 89 9f c6 ca c9 d2 32 96 bd 9d e8 79 7c 64 ea 81 72 f1 71 71 71 71 10 c0 45 c5 c4 d8 2f 17 2f 17 17 85 Data Ascii: ^.....&xRrHl`L0/qq4RHo^'FO^rifv"tYKhs'{\8Ce'<E~3Z>8g~eIoaKya'Nj'r6G@z82y\|drqqqqE//
2024-10-14 04:53:31 UTC	16384	IN	Data Raw: c6 63 70 f2 1d d7 d6 7f 15 9b ff e6 8c 94 de e2 dd ef 3c 1d ff a9 18 ef 75 9b 72 72 ac db fb 5f 96 16 c0 99 fd 3f 7f ff 4b 22 21 a2 87 0f 01 8f 0c e0 10 37 98 90 18 f9 23 84 97 bc fd 9b 9b 0c 1c b5 91 6b c8 ed 37 d6 27 70 d1 20 8f 8d 3c 59 22 64 4b 34 6b 0b e1 31 12 0b c4 3e e8 67 c3 4e 21 6b 96 5f cf 0e bd e3 9d bf 01 aa 15 c2 a4 85 18 05 81 b0 3f 64 4a 99 7a 16 c1 61 9c 08 5d 21 97 e4 fe 51 0d ff 2b e1 e9 6e b7 5f 19 14 c5 c4 c1 00 4b c5 c5 c5 c5 cb c5 c5 c5 c4 61 25 e2 fe 32 2e 2e 2e 2e 5e 2e 2e 14 8a 08 b8 b8 ba 8b 97 85 b1 0c fe 14 8b 9f a1 79 7c 8b 8b 8b 8b 8b 97 8b 8b 8b 8b 8b f7 c2 91 71 71 71 71 71 71 71 71 71 71 71 71 71 71 70 a4 48 77 c2 91 71 71 71 75 17 13 50 5e 2e 26 18 09 79 79 78 b8 b8 bf 7c 64 5c 5c 5d 54 46 82 e5 e2 e2 e2 e2 e2 e2 e2 6a Data Ascii: cp<urr_?K"!7#k7'p <Y"dK4k1>gN!k_?dJza]!Q+n_Ka%2....^..y\|qqqqqqqqqqqqqqpHwqqquP^.&yyx\|d\\]TFj

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49918	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cfbr2wt66emzt78g400000005e000000000846w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49923	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 37770a76-901e-0048-046f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cf6qp7g7r97wxgbqc000000056g0000000095mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49922	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: a2b1ec5b-001e-002b-54a3-1b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cf6qp7g7r97wxgbqc000000057g0000000086t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49921	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 745fe90a-101e-005a-7f69-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cfnqpbkckdefmqa4400000005yg000000005261 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49924	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8d6d9129-701e-0001-43c0-1ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cf4g2pjavqhm24vp40000000630000000009w57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49925	172.217.16.193	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	549	OUT	GET /drive-storage/AJQWtBP51xmDayO177Cu2hlTmLgPBm_fdzpys_Wjx3cxmGoJnkQ5Clw0h8bHEzH99AuRaHAcAujFc8xx6IbDxJfjQM-jkya0wb50YqSG=s512 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 04:53:32 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="ALISEDA CARISA 2.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 04:53:32 GMT Server: fife Content-Length: 2008 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 04:53:32 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 02 02 02 02 02 02 02 02 02 02 02 02 08 02 02 02 02 02 0a 07 07 06 08 02 0a 02 02 02 0a 02 02 02 02 06 05 02 02 05 02 02 02 05 0a 05 05 07 08 09 09 09 02 03 0b 0c 0a 08 0c 06 08 09 08 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 01 20 02 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF
2024-10-14 04:53:32 UTC	1149	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49927	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	1935	OUT	POST /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=134&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=video/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=13215778&dur=267.267&lmt=1727806976676935&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIhAPRyiGN60jr25qc4R2s3bbFkfa2QoKIATH1QMdCgz1AOAiBSP7yWw6jzfwNhZfztsbZGgoomXd8cEIbzGsEgm-r2xQ==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRAIgcDmFN4FfWXXwqY9XQFmsWxnvzpqFb0gQLbHDlkRC1YYCIC8lgdmvfSskVHNYAJw9ItWlggFgpC5jAk2dHGZugpss&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=239315-492644&rn=5&rbuf=5005&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youtube.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youtube.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:32 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-10-14 04:53:32 UTC	964	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:22:56 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:32 GMT Expires: Mon, 14 Oct 2024 04:53:32 GMT Cache-Control: private, max-age=10493 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://youtube.googleapis.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://youtube.googleapis.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:32 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-10-14 04:53:32 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 86 01 20 c7 a8 d7 c8 e6 ed 88 03 30 d3 cd 0e 6a 0c 08 86 01 10 c7 a8 d7 c8 e6 ed 88 03 70 92 bb 0f Data Ascii: 1DCgR0Q6nyWw 0jp
2024-10-14 04:53:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:32 UTC	7	IN	Data Raw: 33 64 64 39 37 0d 0a Data Ascii: 3dd97
2024-10-14 04:53:32 UTC	5	IN	Data Raw: 15 d3 ec 1e 00 Data Ascii:
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: 00 00 04 1c 6d 6f 6f 66 00 00 00 10 6d 66 68 64 00 00 00 00 00 00 00 02 00 00 04 04 74 72 61 66 00 00 00 18 74 66 68 64 00 02 00 0a 00 00 00 01 00 00 00 01 00 00 03 e9 00 00 00 10 74 66 64 74 00 00 00 00 00 01 d5 38 00 00 03 d4 74 72 75 6e 00 00 06 01 00 00 00 78 00 00 04 24 00 00 24 e9 00 00 00 00 00 00 03 ba 00 01 00 00 00 00 05 7e 00 01 00 00 00 00 09 88 00 01 00 00 00 00 02 dc 00 01 00 00 00 00 02 08 00 01 00 00 00 00 01 f6 00 01 00 00 00 00 05 3d 00 01 00 00 00 00 03 5d 00 01 00 00 00 00 03 22 00 01 00 00 00 00 02 d7 00 01 00 00 00 00 03 4d 00 01 00 00 00 00 1b cc 00 01 00 00 00 00 01 53 00 01 00 00 00 00 02 64 00 01 00 00 00 00 03 d8 00 01 00 00 00 00 04 10 00 01 00 00 00 00 03 14 00 01 00 00 00 00 05 50 00 01 00 00 00 00 0e ca 00 01 00 00 00 00 03 Data Ascii: moofmfhdtraftfhdtfdt8trunx$$~=]"MSdP
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: 9b 12 88 43 15 c3 81 29 9a 9e 66 38 2f f0 c5 7f 5a 92 b3 d9 63 29 77 09 3b fc 2c b5 56 4a 8a 52 e2 64 e2 08 fe 12 aa 94 c9 92 d3 88 dd 5b 84 2b ca a4 90 91 34 e4 a7 2d ba b7 27 18 51 fa 7b cb c4 c3 03 bb d0 d8 9f a8 c1 b1 f9 3b fa f8 c5 5a e9 93 89 46 75 ec bd 5f 0a 31 e1 c8 3e f3 94 c4 53 1f 37 ca d6 c6 28 68 32 a7 de ea dd ee 4a f5 f5 0c f0 a6 43 15 9b 43 a6 6e 08 26 19 91 1f 3b 01 50 17 74 6e 42 72 10 67 a0 34 4b ba 7d 52 7b 02 9e 14 dc 2e 4f 27 39 38 95 50 da e1 65 d1 39 57 ae 31 44 88 63 31 0e 4c 2c ee 2a 53 f6 7e 63 e0 00 00 01 f2 21 ec 04 3c 33 86 ff 15 0e 61 18 49 4f 0e 6e 1a 7c 67 8c 0d 70 e3 a8 6b 72 2a 9b c5 7f 51 8f 8a 88 e8 19 b7 1e f2 76 5b 1c f8 ed 42 5b 86 bc 25 e1 af 15 b8 af f9 7c de 23 c5 78 af 11 fd 45 3e d7 6b 97 cb af 51 5e 6f 37 9b Data Ascii: C)f8/Zc)w;,VJRd[+4-'Q{;ZFu_1>S7(h2JCCn&;PtnBrg4K}R{.O'98Pe9W1Dc1L,S~c!<3aIOn\|gpkrQv[B[%\|#xE>kQ^o7
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: 19 c9 63 33 48 ba 42 89 03 1c a9 7b d7 fb f7 b9 7c b9 a9 f3 3b 9f 7b 84 e7 fc 7b 40 e8 2b 06 17 b7 7b a0 64 a7 82 52 2b 45 c5 ac b4 8c b4 37 b9 ff 18 cb 42 90 5e 19 68 14 5c 17 bf d2 ae 10 12 1d f5 dd 1b 86 12 8a f9 c7 4b 43 0c f9 e3 3d 1e 25 a3 04 0c 6e c5 f8 d0 6e 2e 79 75 11 b8 fd 4b ea 27 c9 eb d7 a7 25 61 bd 54 9e 5f 17 af 5b a9 7e e8 bf 97 7b 19 0e 3c 71 8e 2b a1 bc bd 39 06 a6 14 65 7e 79 60 88 9c 17 d7 7b f7 ad 74 ee a1 e3 76 6a 6e 7a ac 20 c0 71 28 e6 9f af ad bf f0 f1 78 e7 fb d0 45 b3 f4 a1 33 07 ad 2b d8 7e 1a 4f 52 96 30 c6 05 a1 8e 16 30 10 cd 71 2b 64 f1 95 bd c4 f2 e2 38 6e fd 2f 89 29 89 a4 cc a6 2d 69 0b e9 56 86 16 c1 b0 3c b2 92 88 7e 0e af 09 07 3d e4 7d 79 1f 7e f1 50 42 e1 1e 13 2f 7b 8d 0e 22 29 72 fa db 46 11 76 63 b2 64 fa f8 bb Data Ascii: c3HB{\|;{{@+{dR+E7B^h\KC=%nn.yuK'%aT_[~{<q+9e~y`{tvjnz q(xE3+~OR00q+d8n/)-iV<~=}y~PB/{")rFvcd
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: 28 97 42 54 51 c4 92 e2 c4 b6 e8 ef 89 57 38 94 9d c4 89 e4 37 2e 48 40 bf 88 1a af d6 24 91 5b 12 ee 51 a9 ff 47 57 28 a4 84 bd 9d b1 59 aa 61 97 c9 10 7e 61 37 30 9a 9b 51 02 71 a8 5b f4 58 96 e7 12 d3 c5 13 47 5b 12 e2 b8 a5 77 21 ae 9f 38 89 26 3f 5e 8f ea 68 9f f1 aa ff c4 ac 51 fa 13 62 b1 7e e6 13 76 68 8f 75 88 3b 45 e4 3b c5 42 61 1e 9c 4d 63 26 cb 11 b1 38 ae 35 5f a2 a6 13 c8 26 36 08 c0 43 4d e2 a6 c5 78 aa 7d 61 21 2a 2b 3d 9a 4f 72 ea 52 42 22 5c 51 c5 3b 90 6a 8a de fc 4f 22 8e af 2e bb 5c e4 e2 09 da e9 43 3e 68 00 00 03 97 21 fc 07 3d 89 89 78 95 58 95 54 21 5e 25 6c 46 f1 1a c4 72 88 57 42 15 f8 34 90 42 8a ca 21 45 6c 42 8a d8 8a 14 6b 13 fb 10 98 ac 50 51 4b 4f fe de db 71 0b 88 57 42 12 0b 2d 0a 3b 2c 18 ae 10 f0 e3 92 0d 37 0f c5 12 Data Ascii: (BTQW87.H@$[QGW(Ya~a70Qq[XG[w!8&?^hQb~vhu;E;BaMc&85_&6CMx}a!*+=OrRB"\Q;jO".\C>h!=xXT!^%lFrWB4B!ElBkPQKOqWB-;,7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49928	74.125.0.137	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	1651	OUT	GET /videoplayback?expire=1728892405&ei=xaMMZ-HSCLzOjNsP3PG_-Qg&ip=8.46.123.33&id=0c2811d10ea7c96c&itag=140&source=webdrive&requiressl=yes&xpc=EghonaK1InoBAQ==&met=1728881605,&mh=6M&mm=32,26&mn=sn-ab5l6nk6,sn-p5qs7n6d&ms=su,onr&mv=u&mvi=4&pl=23&rms=su,su&ttl=transient&susc=dr&driveid=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&app=explorer&eaua=3mympojr-Ug&mime=audio/mp4&vprv=1&prv=1&rqh=1&gir=yes&clen=4327556&dur=267.331&lmt=1727806982613995&mt=1728881339&fvip=2&subapp=DRIVE_WEB_FILE_VIEWER&txp=0000224&sparams=expire,ei,ip,id,itag,source,requiressl,xpc,ttl,susc,driveid,app,eaua,mime,vprv,prv,rqh,gir,clen,dur,lmt&sig=AJfQdSswRQIgdv0JU5Zm4rFaAMW1NZf0rNHRuYq9BnQsGN4mUY74STMCIQCTGwmHNiiSFfD38qVKtu8QANjiNqnUwOstPOqUYgENeA==&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=ACJ0pHgwRQIhAKDH4iGVxsHI1PwUujmukPfcSXbuKxGV50S0FxkL9_ZRAiAaj22437gpzERsBjvgLK3Y6UMn2cWmCsSN5IoJ210QYg==&alr=yes&cpn=sxKOFrQHdQ0DzukG&c=WEB_EMBEDDED_PLAYER&cver=1.20241008.01.00&range=66615-132150&rn=4&rbuf=4039&ump=1&srfvp=1 HTTP/1.1 Host: rr4---sn-ab5l6nk6.c.drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:32 UTC	446	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Oct 2024 18:23:02 GMT Content-Type: application/vnd.yt-ump Date: Mon, 14 Oct 2024 04:53:32 GMT Expires: Mon, 14 Oct 2024 04:53:32 GMT Cache-Control: private, max-age=10493 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-14 04:53:32 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-10-14 04:53:32 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 44 43 67 52 30 51 36 6e 79 57 77 18 8c 01 20 eb d7 c1 cb e6 ed 88 03 30 b7 88 04 6a 0c 08 8c 01 10 eb d7 c1 cb e6 ed 88 03 70 80 80 04 Data Ascii: 1DCgR0Q6nyWw 0jp
2024-10-14 04:53:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 04:53:32 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-10-14 04:53:32 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: 38 fd 3a 5f b0 63 17 7c 52 23 55 b0 cf 7d cc 00 75 89 a9 c2 9b 16 9e 83 15 5c 51 4a 90 52 e8 44 d1 f3 b4 19 58 8d 2a d4 f6 96 d0 11 50 89 53 40 0d 9b e7 9c c8 a0 22 c9 5a 4a 95 e6 7a 5f 15 6e fb 91 3c 40 b4 4d 92 cb fe 9d be 36 b0 82 74 08 ea ee 08 ee 40 02 72 89 09 52 21 58 28 33 40 0c 46 02 02 36 70 29 a2 9a aa d6 2c 5f 3c 20 f4 cc 7e 4e 73 56 57 50 ae 2d eb d5 e3 86 1a a5 1c 44 99 c4 5f 49 34 4a 01 3b 25 81 d4 fa f8 70 8d f3 d8 54 f6 57 db 36 75 0a 53 d6 e2 8e e6 92 76 98 8b 0c 22 59 d9 2c ee d5 67 ba d7 3b 67 ab e6 63 b5 7a d0 d1 04 a3 eb 75 b8 7a cc 3c aa 4b e1 79 47 d1 12 da 4b 16 34 e0 01 3d 0e 54 b7 b0 02 70 14 82 fb 54 f2 81 af 53 d1 97 02 5e ff 21 0a 94 c5 92 98 c4 42 a8 90 ac 91 08 2b 54 11 85 d1 20 cb ba 95 15 aa a9 2b 07 f7 49 49 9b 3a cc ad Data Ascii: 8:_c\|R#U}u\QJRDX*PS@"ZJz_n<@M6t@rR!X(3@F6p),_< ~NsVWP-D_I4J;%pTW6uSv"Y,g;gczuz<KyGK4=TpTS^!B+T +II:
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: 82 d2 d3 85 36 e9 6d c9 84 f1 a6 57 19 e3 d7 41 59 4f 5d a3 09 57 c0 63 71 8d 39 dd 0c 98 ab bc ab 15 ad f4 e5 b2 72 b4 a4 57 7b a4 b7 2a c7 db 98 c4 6a f4 85 62 20 10 b4 66 04 f4 a2 95 18 95 06 fb 2e 55 78 98 5e 4a b1 15 18 c6 17 0b c3 be 73 17 8b f6 ea d5 98 ef f5 71 cb 2c 77 fc f4 13 13 72 34 62 59 01 61 f6 39 e1 b5 59 59 4f 7a 89 68 78 20 9c 36 56 45 4d 64 68 99 5f 43 04 20 ea 8b 09 f3 d2 77 83 f1 06 0a b3 14 fd c2 54 66 51 01 04 80 00 00 00 d5 e4 5e 01 b3 70 7c 4b 0e 7b 7e 54 80 8e 58 7c 16 fe 50 e8 b7 a9 40 02 a7 45 c5 cb 99 df ca 14 6f 2a cd ac 20 8f 4e 57 92 71 c0 a8 90 16 0d eb cc 13 e7 bc 2c f0 27 0f 89 cd 68 d6 80 21 21 c8 e6 02 fa 6c 48 5f f3 bc 7b 15 7c c2 19 6e fd 8b 4a 53 8c 3d a7 47 10 35 04 80 0a 8e 9a 3c ab 4e 74 0c 47 4a 89 5e ca 05 f1 Data Ascii: 6mWAYO]Wcq9rW{jb f.Ux^Jsq,wr4bYa9YYOzhx 6VEMdh_C wTfQ^p\|K{~TX\|P@Eo NWq,'h!!lH_{\|nJS=G5<NtGJ^
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: c9 5c 49 c8 ae f3 47 0b d4 c4 82 34 ba ac 10 77 8d 2b b2 bd 9e bd e7 90 89 5e 20 f4 e3 96 a6 09 31 7c 26 b9 a6 ef 76 9f c6 f5 f7 bc eb 1f c4 ac 73 2d 6d ae 1c 67 7b ab a8 96 93 87 9d eb 9e c7 79 b2 78 dd f9 f5 a6 31 cd 98 39 da 00 9f b3 c1 6c 4a 83 50 0c 4a 02 1c 1a dd 50 2c 30 68 11 45 e0 55 bd b5 94 49 dd 07 d8 b2 08 ff 8e d8 c1 42 b7 ba 84 9e f5 b3 27 52 81 ce 67 1c 66 e5 87 d2 c0 c2 ae 6c 0d 37 35 ca 59 d5 45 80 ae 5d f8 b9 8c 7a 22 0d 7e a9 dc 5f 7f 63 38 6a 25 fa 14 ff be c5 0b f0 f3 13 ce 54 4b 8c 04 bb 84 a4 65 00 9f 45 87 13 68 c2 65 f2 ba ac a0 f6 ec 00 31 bf 00 3d f7 66 f3 7f 5d 8b a8 39 21 0a 94 d5 b6 56 85 22 a1 c0 21 10 a3 37 11 77 54 b2 c1 09 4b c0 9d d3 33 db 23 88 c4 92 25 1a de 5c 9d 57 02 1f 46 28 78 8e f0 c8 34 33 15 ea e6 6a 84 cb 10 Data Ascii: \IG4w+^ 1\|&vs-mg{yx19lJPJP,0hEUIB'Rgfl75YE]z"~_c8j%TKeEhe1=f]9!V"!7wTK3#%\WF(x43j
2024-10-14 04:53:32 UTC	16384	IN	Data Raw: ff a5 a6 0c 27 58 3c a9 3e 50 64 de c8 e6 bb 63 7e ce 5a a8 c8 df fb ff 5b 88 8b de 38 95 fb e0 1b 76 4a 6c 2a cb 17 4d 5e 2f 4e 71 88 05 3f be 03 5f 26 80 65 f0 89 f0 00 06 c4 a7 20 30 05 e7 ea 4e f6 16 d6 0c f0 23 3f 21 0a 94 f5 c2 4e 8a 62 20 c4 48 6c d7 c1 40 1c 73 70 b3 2f 1a 25 00 e4 5e b4 b5 45 61 f3 34 be 1c 7a 8e f4 93 02 8d 8f 1f 1a 6e 7d 9f 08 95 27 ee e4 92 56 dc c7 c7 43 d5 a7 67 72 7e 82 4f b9 38 0b 40 8c 7a b8 b0 12 8e 84 ab bc ce 1f 06 5c 2c 93 f3 7b 01 8a b1 71 ea a2 2e e1 3a 37 34 67 1c e9 9d 88 93 ac 40 8a da d8 d7 c2 9a 99 bf 90 3e b5 d2 1e 75 02 55 5a 1a 83 e6 89 4b e3 04 26 7a aa e6 dd 2d 69 45 9b 43 25 99 ca 54 d7 b1 78 6b c1 92 dd 02 0a 7f 2b 3c ad be 07 76 4f 7d eb d6 b6 9a 59 32 62 6f 0b 03 12 58 30 98 89 a7 75 ae 04 94 5a 75 84 Data Ascii: 'X<>Pdc~Z[8vJl*M^/Nq?_&e 0N#?!Nb Hl@sp/%^Ea4zn}'VCgr~O8@z\,{q.:74g@>uUZK&z-iEC%Txk+<vO}Y2boX0uZu
2024-10-14 04:53:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49926	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 4e 69 55 4a 48 31 32 75 30 69 33 72 76 47 57 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 32 38 30 34 65 36 37 64 33 62 30 36 33 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rNiUJH12u0i3rvGW.1Context: 3e2804e67d3b063a
2024-10-14 04:53:32 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 04:53:32 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 4e 69 55 4a 48 31 32 75 30 69 33 72 76 47 57 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 32 38 30 34 65 36 37 64 33 62 30 36 33 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 37 58 70 70 53 4e 2b 71 67 6c 66 6c 4b 76 34 39 37 70 4b 35 57 37 75 41 6f 4f 4d 76 71 56 4a 78 46 35 7a 76 53 30 59 64 34 64 41 71 63 46 42 43 2b 75 38 38 79 65 7a 75 6f 44 43 41 71 4c 34 47 63 4d 43 2b 31 4c 68 56 63 6e 63 31 55 50 2b 6b 56 2b 2b 39 36 57 4a 35 74 67 63 55 35 72 74 38 31 6e 34 65 35 51 65 33 73 6b 71 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: rNiUJH12u0i3rvGW.2Context: 3e2804e67d3b063a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAd7XppSN+qglflKv497pK5W7uAoOMvqVJxF5zvS0Yd4dAqcFBC+u88yezuoDCAqL4GcMC+1LhVcnc1UP+kV++96WJ5tgcU5rt81n4e5Qe3skqB
2024-10-14 04:53:32 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 4e 69 55 4a 48 31 32 75 30 69 33 72 76 47 57 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 32 38 30 34 65 36 37 64 33 62 30 36 33 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rNiUJH12u0i3rvGW.3Context: 3e2804e67d3b063a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-14 04:53:32 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 04:53:32 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 55 55 2f 65 52 2f 4f 4d 45 53 42 6d 77 49 48 4c 67 46 6e 4b 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: fUU/eR/OMESBmwIHLgFnKA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49929	142.250.184.238	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	932	OUT	GET /timedtext?id=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&vid=0c2811d10ea7c96c&authpayload=ASH5dRmXCHhTODr0jIskuL9KQTx0eokai7Yrt7lwcDsDtjQkQ0mNAz1zGrY231MM7R7RUuGAHc8gph85UnNQO---7HkVk_8c7co8Eq3xNnzgHWUCL2JjV_IJUHgbiiF2_Tz9&hl=en-US&type=list&tlangs=1&v=1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM&vssids=1 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g; DRIVE_STREAM=XR0Y0_3TJx8
2024-10-14 04:53:33 UTC	1823	IN	HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 04:53:32 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-ThkRB0bIuSrAxXCxmhKI4g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveTimedTextTrackHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveTimedTextTrackHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveTimedTextTrackHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/DriveTimedTextTrackHttp/web-reports?context=eJzj0tDikmLw1ZBicEqfwRoCxKt_nmNdD8R7Np1nPQDEf2QusTLIXmIV4uE4c3zTDjaBDdOn7mdWUk3KL4xPKcosS80oKSlILMgsTi0qSy2KNzIwMjE0MDDWMzCKLzAAAJ4fIu8" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:33 UTC	107	IN	Data Raw: 36 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 74 72 61 6e 73 63 72 69 70 74 5f 6c 69 73 74 20 64 6f 63 69 64 3d 22 38 37 35 39 36 39 37 31 37 31 31 35 32 37 35 36 32 38 22 3e 3c 2f 74 72 61 6e 73 63 72 69 70 74 5f 6c 69 73 74 3e 0d 0a Data Ascii: 65<?xml version="1.0" encoding="utf-8" ?><transcript_list docid="875969717115275628"></transcript_list>
2024-10-14 04:53:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49930	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cfnqpbkckdefmqa4400000005v000000000cn9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49931	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cfspvtq2pgqb2w5k000000005x00000000003un x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49933	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cfp6mfve0htepzbps00000005d00000000026r2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49934	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6d1bd684-201e-00aa-7f91-1c3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cf96l6t7bwyfgbkhw00000004ug00000000e0up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49932	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 04:53:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 04:53:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T045332Z-17db6f7c8cf9wwz8ehu7c5p33g000000033g00000000cvhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 04:53:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49936	216.58.206.78	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 04:53:32 UTC	964	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5619 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=NmOIwZWTUZsGNBDjzyPGH-UotSNewUbwQOIlpWP_4VDOIamGoJYYgrgdLw0cU62tyapKAXcgc0rBrDKWNqWHJVjV95L-G6IWtTMV2BaBJ9nKhY3_iEP9aOZanEKziVqVeZnSYGsFBmWLEZG8JOo1fLHABLr1a6COU9NgRxBY1VFEmW4MJkEgRf-Z2g
2024-10-14 04:53:32 UTC	5619	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 38 38 38 31 36 31 31 31 39 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],189,[["1728881611198",null,null,null,
2024-10-14 04:53:33 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 14 Oct 2024 04:53:33 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 04:53:33 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-14 04:53:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	00:53:06
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:53:08
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:53:11
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	00:53:28
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6056 --field-trial-handle=2040,i,13126220536750110149,4832844798176370529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z	HTTP Parser: No favicon
Source: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view	HTTP Parser: No favicon
Source: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view	HTTP Parser: No favicon
Source: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view	HTTP Parser: No favicon
Source: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view	HTTP Parser: No favicon
Source: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view	HTTP Parser: No favicon
Source: https://drive.google.com/file/d/1VKTnEFNszlUYDDu4ET-UMJhJtRVokxeM/view	HTTP Parser: No favicon

Source: global traffic	DNS traffic detected: DNS query: 7t8ql.r.ag.d.sendibm3.com
Source: global traffic	DNS traffic detected: DNS query: sibautomation.com
Source: global traffic	DNS traffic detected: DNS query: in-automate.brevo.com
Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: blobcomments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: peoplestackwebexperiments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: video.google.com
Source: global traffic	DNS traffic detected: DNS query: rr4---sn-ab5l6nk6.c.drive.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-p5qs7n6d.c.drive.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: chromecache_166.2.dr, chromecache_111.2.dr	String found in binary or memory: EZb.prototype.H=function(a){var b=a.V8;if(!b)return{};var c=b.taa,d,e,f=(d=b.XZ)==null?void 0:(e=d.G8)==null?void 0:e.message,g;b=(g=b.XZ)==null?void 0:g.state;var k;g=(k=a.c$)==null?void 0:k.b7;var l;k=(l=a.Oba)==null?void 0:l.Nba;c={player_response:c,reason:f,status:b,hbut:g,ttsurl:k};var m;if((m=a.TX)==null?0:m.duration)c.length_seconds=a.TX.duration.replace(DZb,"");return c};var HZb=function(a){BH.call(this,a.oa());this.context=a;this.L=new bg};P(HZb,BH);HZb.prototype.D=function(){return"onYouTubeIframeAPIReady"};HZb.prototype.H=function(){var a=IE(this.context.ja())\|\|new AH;return NJa(z(a,1,"https://www.youtube.com"),"iframe_api")};HZb.prototype.C=function(){return fk("YT.Player",this.oa().getWindow())};HZb.prototype.Ag=function(){return this.L};var IZb=function(){Tv.apply(this,arguments)};P(IZb,Tv);var hj={};var AJ=function(a){bg.call(this);var b=this;this.context=a;this.F=null;this.V=!1;this.H=0;this.L=null;this.sa(this.context);var c=a.ja();a=a.oa();uE(c)\|\|Tf(c,83);this.J=new Isb;var d=JZb(c);Lsb(this.J,d,function(){return f$a(d,!0)});Ksb(this.J,d);this.handler=new Mu(this);this.sa(this.handler);this.C=new XHb;this.sa(this.C);KZb(this,c,a);LZb(this);this.D&&Jh(c)&&(this.context.get(YA).start(),this.D.Ib({fa:1}),(c=si(c))&&this.context.get(YA).setEnabled(!!K(c,18,!1)));this.root=(c=Te(this.context,uJb))&& equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr	String found in binary or memory: Mf=w(["https://sandbox.google.com/tools/feedback/"]),Nf=w(["https://www.google.cn/tools/feedback/"]),Of=w(["https://help.youtube.com/tools/feedback/"]),Pf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Qf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Rf=w(["https://localhost.corp.google.com/inapp/"]),Sf=w(["https://localhost.proxy.googlers.com/inapp/"]),Tf=V(vf),Uf=[V(wf),V(xf)],Vf=[V(yf),V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff),V(Gf),V(Hf)],Wf=[V(If),V(Jf)],Xf= equals www.youtube.com (Youtube)
Source: chromecache_130.2.dr, chromecache_153.2.dr	String found in binary or memory: Q3.prototype.kR=function(){var a=this.getContext().ja();this.item.Ve&&Object.assign(this.C,this.item.Ve);this.item.Sq()===1&&p_e(this);this.C.el=o_e(this);this.C.cc_load_policy=1;this.C.authuser===void 0&&(this.C.authuser=a.Bd()\|\|"0");this.L();this.ready=!1;a=this.na;for(var b=wc(this.C),c=0;c<u_e.length;c++){var d=u_e[c];b[d]&&(this.wa=!0,delete b[d])}a.call(this,b)};Q3.prototype.na=function(){};var u_e=["fmt_list","fmt_stream_map","url_encoded_fmt_stream_map","ttsurl"];var R3=function(a,b,c){Q3.call(this,a,b,c);this.volume=this.ga=0;this.Aa=!1;this.D=this.R=this.V=null;this.playerState=-1;this.ma=IE(c.ja())\|\|new AH;this.host=z(this.ma,1,"https://www.youtube.com");this.ka={onError:this.Ga.bind(this),onKeyPress:this.onKeyPress.bind(this),onReady:this.onReady.bind(this),onStateChange:this.onStateChange.bind(this),onTabOrderChange:this.Ya.bind(this),onVideoProgress:this.onVideoProgress.bind(this),onVolumeChange:this.onVolumeChange.bind(this)};this.ta().listen(this.oa().getWindow(), equals www.youtube.com (Youtube)
Source: chromecache_126.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://7t8ql.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMSBF0gGyFwr7N1fdCT8W/FBlgXxf9SI5Z